libvirt/src/network
Daniel P. Berrangé c6cbe18771 network: delay global firewall setup if no networks are running
Creating firewall rules for the virtual networks causes the kernel to
load the conntrack module. This imposes a significant performance
penalty on Linux network traffic. Thus we want to only take that hit if
we actually have virtual networks running.

We need to create global firewall rules during startup in order to
"upgrade" rules for any running networks created by older libvirt.
If no running networks are present though, we can safely delay setup
until the time we actually start a network.

Reviewed-by: Jim Fehlig <jfehlig@suse.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2019-05-23 16:29:48 +01:00
..
bridge_driver_linux.c network: delay global firewall setup if no networks are running 2019-05-23 16:29:48 +01:00
bridge_driver_nop.c network: delay global firewall setup if no networks are running 2019-05-23 16:29:48 +01:00
bridge_driver_platform.c Remove all Author(s): lines from source file headers 2018-12-13 16:08:38 +00:00
bridge_driver_platform.h network: delay global firewall setup if no networks are running 2019-05-23 16:29:48 +01:00
bridge_driver.c network: delay global firewall setup if no networks are running 2019-05-23 16:29:48 +01:00
bridge_driver.h Enforce a standard header file guard symbol name 2018-12-14 10:47:13 +00:00
default.xml
leaseshelper.c Always put _LAST enums on second line of VIR_ENUM_IMPL 2019-04-11 12:47:23 -04:00
libvirt.zone network: explicitly allow icmp/icmpv6 in libvirt zonefile 2019-02-14 15:06:42 -05:00
Makefile.inc.am src: don't statically link code that's already in libvirt.so 2019-05-17 14:34:45 +01:00