netdev.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Vincent Bernat <bernat@luffy.cx>
To: David Miller <davem@davemloft.net>
Cc: <zenczykowski@gmail.com>, <netdev@vger.kernel.org>,
	<yoshfuji@linux-ipv6.org>
Subject: Re: nonlocal_bind and IPv6
Date: Fri, 16 Dec 2011 10:53:48 +0100	[thread overview]
Message-ID: <e21a2d9682b5d83fefe3f09a07316033@luffy.cx> (raw)
In-Reply-To: <20111216.020600.1695776769736304587.davem@davemloft.net>

On Fri, 16 Dec 2011 02:06:00 -0500 (EST), David Miller wrote:

>> OoO En  ce milieu  de nuit  étoilée du vendredi  16 décembre  2011, 
>> vers
>> 04:58, Maciej Żenczykowski <zenczykowski@gmail.com> disait :
>>
>>> why not simply use the IP_TRANSPARENT or IP_FREEBIND socket 
>>> options?
>>
>> Because  this requires  modifying each  affected software.  This  
>> can be
>> difficult if you don't have the source code available.
>
> But it means that it would work on every single kernel verion out
> there.

Sure. But... The typical scenario for this setting is when you are 
using something like VRRP. You have your web server running on several 
nodes and only one of them has the appropriate IP address at the given 
moment. Moreover, you have to bind to specific IP and not 0.0.0.0 for 
other reasons (for example, when using several SSL virtualhosts). 
Starting the web server only when a node gets the appropriate IP is not 
possible because it increases downtime. Since this VRRP stuff is related 
to system configuration, it seems sensible to have a system setting 
equivalent to IP_FREEBIND socket options. This is ip_nonlocal_bind.

Moreover, I am just adding the IPv6 version of this setting. The IPv4 
version already exists.

  reply	other threads:[~2011-12-16  9:53 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-12-14 16:20 nonlocal_bind and IPv6 Vincent Bernat
2011-12-14 16:20 ` [PATCH 1/2] net/ipv6: add ip_nonlocal_bind sysctl for IPv6 Vincent Bernat
2011-12-14 16:20 ` [PATCH 2/2] net/ipv4: bind ip_nonlocal_bind to current netns Vincent Bernat
2011-12-16  3:58 ` nonlocal_bind and IPv6 Maciej Żenczykowski
2011-12-16  6:24   ` Vincent Bernat
2011-12-16  7:06     ` David Miller
2011-12-16  9:53       ` Vincent Bernat [this message]
2011-12-16 11:10         ` Francois Romieu
2011-12-16 18:20           ` David Miller
2011-12-16 18:18         ` David Miller
2011-12-17 10:52           ` Vincent Bernat
2011-12-16  6:46 ` YOSHIFUJI Hideaki
2011-12-16  9:46   ` Vincent Bernat
  -- strict thread matches above, loose matches on Subject: below --
2011-12-12 13:18 Vincent Bernat

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=e21a2d9682b5d83fefe3f09a07316033@luffy.cx \
    --to=bernat@luffy.cx \
    --cc=davem@davemloft.net \
    --cc=netdev@vger.kernel.org \
    --cc=yoshfuji@linux-ipv6.org \
    --cc=zenczykowski@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).