Re: [nf-next PATCH 0/2] Support resetting rules' state

[Phil Sutter <phil@nwl.cc>]

On Wed, Nov 09, 2022 at 11:16:14AM +0100, Pablo Neira Ayuso wrote:
> On Tue, Nov 08, 2022 at 05:49:25PM +0100, Phil Sutter wrote:
[...]
> > IIRC, your request at NFWS was to introduce something like:
> > 
> > - reset table (for 'reset rules table')
> 
> This would require to make two calls, one to NFT_MSG_GETOBJ_RESET and
> another to NFT_MSG_GETRULE_RESET:

Ah yes, there is NFT_OBJECT_UNSPEC which should allow to reset all kinds
of objects at once.

> > - reset chain (for 'reset rules chain')
> 
> This could be implemented with the new NFT_MSG_GETRULE_RESET, which
> already allows to filter with chain.

Yes, it would just be an alias for 'reset rules chain'.

> So these two would only require userspace code, this can be done
> later.

ACK.

> > But the first one may seem like resetting *all* state of a table,
> > including named quotas, counters, etc. while in fact it only resets
> > state in rules.
> 
> Yes, first should reset everything that is stateful and that is
> contained in the table.
> 
> As said, this can be implemented later on from userspace.
> 
> This is addressing all my questions then, I'm going to put this into
> nf-next.

Cool, thanks!

Cheers, Phil