libvirt/tests/networkxml2firewalldata
Daniel P. Berrangé c6cbe18771 network: delay global firewall setup if no networks are running
Creating firewall rules for the virtual networks causes the kernel to
load the conntrack module. This imposes a significant performance
penalty on Linux network traffic. Thus we want to only take that hit if
we actually have virtual networks running.

We need to create global firewall rules during startup in order to
"upgrade" rules for any running networks created by older libvirt.
If no running networks are present though, we can safely delay setup
until the time we actually start a network.

Reviewed-by: Jim Fehlig <jfehlig@suse.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2019-05-23 16:29:48 +01:00
..
base.args network: delay global firewall setup if no networks are running 2019-05-23 16:29:48 +01:00
nat-default-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-default.xml
nat-ipv6-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-ipv6.xml
nat-many-ips-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-many-ips.xml
nat-no-dhcp-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-no-dhcp.xml
nat-tftp-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
nat-tftp.xml
route-default-linux.args util: move virtual network firwall rules into private chains 2019-01-29 13:37:11 +00:00
route-default.xml