BUG: kernel 3.10 + ipset + NET_NS

BUG: kernel 3.10 + ipset + NET_NS

[V. Lavrov]

ipset does not support NET_NS. All containers have a common ipsets.

Host:
root@ls-gw2:~# ipset -V
ipset v6.19, protocol version: 6
root@ls-gw2:~# uname -r
3.10.10
iroot@ls-gw2:~# pset -N xxx hash:ip
root@ls-gw2:~# ipset -A xxx 1.1.1.1

LXC:

root@orig:~# ipset -L xxx
Name: xxx
Type: hash:ip
Revision: 1
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 8280
References: 0
Members:
1.1.1.1
root@orig:~# ipset -A xxx 2.2.2.2

Host:

root@ls-gw2:~# ipset -L
Name: xxx
Type: hash:ip
Revision: 1
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 8296
References: 0
Members:
1.1.1.1
2.2.2.2

Re: BUG: kernel 3.10 + ipset + NET_NS

[Jozsef Kadlecsik]

On Mon, 9 Sep 2013, V. Lavrov wrote:

> ipset does not support NET_NS. All containers have a common ipsets.

That's true, because no one requested netns support in ipset.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary