| commit | 9e2f6c5d78db6647eb9d7bfeb20b9e0f9ff2c56c | |
| author | Kirill Tkhai <ktkhai@virtuozzo.com> | |
| Thu, 29 Mar 2018 14:03:35 +0000 (29 17:03 +0300) | ||
| committer | David S. Miller <davem@davemloft.net> | |
| Fri, 30 Mar 2018 14:59:23 +0000 (30 10:59 -0400) | ||
| tree | fa627671f16e4c0a566150c51bde1e7f29400544 | treesnapshot (tar.gz zip) |
| parent | e9a441b6e729e16092fcc18e3962b952a01d1e3c | commitdiff |
netfilter: Rework xt_TEE netdevice notifier
Register netdevice notifier for every iptable entry
is not good, since this breaks modularity, and
the hidden synchronization is based on rtnl_lock().
This patch reworks the synchronization via new lock,
while the rest of logic remains as it was before.
This is required for the next patch.
Tested via:
while :; do
unshare -n iptables -t mangle -A OUTPUT -j TEE --gateway 1.1.1.2 --oif lo;
done
Signed-off-by: Kirill Tkhai <ktkhai@virtuozzo.com>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Register netdevice notifier for every iptable entry
is not good, since this breaks modularity, and
the hidden synchronization is based on rtnl_lock().
This patch reworks the synchronization via new lock,
while the rest of logic remains as it was before.
This is required for the next patch.
Tested via:
while :; do
unshare -n iptables -t mangle -A OUTPUT -j TEE --gateway 1.1.1.2 --oif lo;
done
Signed-off-by: Kirill Tkhai <ktkhai@virtuozzo.com>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
| net/netfilter/xt_TEE.c | diffblobblamehistory |