External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2024-07-11 12:25:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
0f1b090b0d
libvirt/tests/networkxml2firewalldata
History
Daniel P. Berrangé c6cbe18771 network: delay global firewall setup if no networks are running 
Creating firewall rules for the virtual networks causes the kernel to
load the conntrack module. This imposes a significant performance
penalty on Linux network traffic. Thus we want to only take that hit if
we actually have virtual networks running.

We need to create global firewall rules during startup in order to
"upgrade" rules for any running networks created by older libvirt.
If no running networks are present though, we can safely delay setup
until the time we actually start a network.

Reviewed-by: Jim Fehlig <jfehlig@suse.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2019-05-23 16:29:48 +01:00
..
base.args network: delay global firewall setup if no networks are running 2019-05-23 16:29:48 +01:00
nat-default-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-default.xml Add test for converting network XML to iptables rules 2014-04-25 15:44:09 +01:00
nat-ipv6-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-ipv6.xml Add test for converting network XML to iptables rules 2014-04-25 15:44:09 +01:00
nat-many-ips-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-many-ips.xml Add test for converting network XML to iptables rules 2014-04-25 15:44:09 +01:00
nat-no-dhcp-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-no-dhcp.xml Add test for converting network XML to iptables rules 2014-04-25 15:44:09 +01:00
nat-tftp-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-tftp.xml Add test for converting network XML to iptables rules 2014-04-25 15:44:09 +01:00
route-default-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
route-default.xml Add test for converting network XML to iptables rules 2014-04-25 15:44:09 +01:00