* netfilter: nf_tables: complete net namespace support
@ 2013-02-19 23:02 Patrick McHardy
2013-02-20 0:56 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: Patrick McHardy @ 2013-02-19 23:02 UTC (permalink / raw)
To: pablo; +Cc: netfilter-devel
Hi Pablo,
just going through the commits to the nftables tree of the past two months,
this one caught my eye:
Commit a85bea2a (netfilter: nf_tables: complete net namespace support) adds
per-NS af_info lists and registers the IPv4/IPv6/Bridge AFs in every NS.
I don't get the point of this at all, when the module is loaded, the AFs
will be registered in every namespace anyways, there's no way to have it
registered in just a subset of the namespaces, so why do this at all?
>From what I can tell, this patch can simply be reverted again.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: netfilter: nf_tables: complete net namespace support
2013-02-19 23:02 netfilter: nf_tables: complete net namespace support Patrick McHardy
@ 2013-02-20 0:56 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2013-02-20 0:56 UTC (permalink / raw)
To: Patrick McHardy; +Cc: netfilter-devel
On Wed, Feb 20, 2013 at 12:02:28AM +0100, Patrick McHardy wrote:
> Hi Pablo,
>
> just going through the commits to the nftables tree of the past two months,
> this one caught my eye:
Great, please let me know if you find more stuff to discuss.
> Commit a85bea2a (netfilter: nf_tables: complete net namespace support) adds
> per-NS af_info lists and registers the IPv4/IPv6/Bridge AFs in every NS.
> I don't get the point of this at all, when the module is loaded, the AFs
> will be registered in every namespace anyways, there's no way to have it
> registered in just a subset of the namespaces, so why do this at all?
>
> From what I can tell, this patch can simply be reverted again.
We need an empty table list for each family in each namespace.
Otherwise registered tables will be globally visible in every existing
namespace.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-02-20 0:56 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-02-19 23:02 netfilter: nf_tables: complete net namespace support Patrick McHardy
2013-02-20 0:56 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).