Re: nftables add vs replace

[Patrick McHardy <kaber@trash.net>]

On Tue, Jan 21, 2014 at 02:08:17PM +0200, Tomasz Bursztyka wrote:
> Hi Patrick,
> 
> >I'm working on my proposed solution. So far just the add vs. create,
> >the replace command will be a bit more involved.
> >
> ># src/nft create table filter
> ><cmdline>:1:1-19: Error: Could not add table: File exists
> >create table filter
> >^^^^^^^^^^^^^^^^^^^
> ># src/nft add table filter
> >#
> 
> Actually, after your patch and Arturo's, it could be possible to
> improve the ruleset management so
> it would use create/add/replace accordingly.
> 
> Though it means it would need to dump first the targeted
> tables/chains to do so,
> thus I am not sure how relevant is my blabbering from performance
> point of view.

How would that work? Dumping rules, flushing the old ones and reinstalling
them is prone to race conditions.