[libvirt PATCH 0/2] network: force re-creation of iptables private chains on firewalld restart

Laine Stump laine at redhat.com
Fri May 8 02:51:12 UTC 2020


Details are in the commit log of patch 2. Essentially, we've been
careful to only create the iptables chains once per run, because it's
very expensive, but when firewalld is restarted, it removes our
chains, so we need to put them back.

I think this may have been a problem as far back as libvirt 5.1.0,
when we began putting our iptables rules into private chains.


Laine Stump (2):
  network: make it safe to call networkSetupPrivateChains() multiple
    times
  network: force re-creation of iptables private chains on firewalld
    restart

 src/network/bridge_driver.c          | 16 +++---
 src/network/bridge_driver_linux.c    | 77 ++++++++++++++++++----------
 src/network/bridge_driver_nop.c      |  3 +-
 src/network/bridge_driver_platform.h |  2 +-
 4 files changed, 62 insertions(+), 36 deletions(-)

-- 
2.25.4




More information about the libvir-list mailing list