libvirt/tests/networkxml2firewalldata
Laine Stump a4f38f6ffe network: use iif/oif instead of iifname/oifname in nftables rules
iifname/oifname need to lookup the string that contains the name of
the interface each time a packet is checked, while iif/oif compare the
ifindex of the interface, which is included directly in the
packet. Conveniently, the rule is created using the *name* of the
interface (which gets converted to ifindex as the rule is added), so
no extra work is required other than changing the commandline option.

If it was the case that the interface could be deleted and re-added
during the life of the rule, we would have to use Xifname (since
deleting and re-adding the interface would result in ifindex
changing), but for our uses this never happens, so Xif works for us,
and undoubtedly improves performance by at least 0.0000001%.

Signed-off-by: Laine Stump <laine@redhat.com>
Reviewed-by: Jiri Denemark <jdenemar@redhat.com>
2024-05-27 23:53:58 +02:00
..
base.iptables
base.nftables
nat-default-linux.iptables
nat-default-linux.nftables network: use iif/oif instead of iifname/oifname in nftables rules 2024-05-27 23:53:58 +02:00
nat-default.xml
nat-ipv6-linux.iptables
nat-ipv6-linux.nftables network: use iif/oif instead of iifname/oifname in nftables rules 2024-05-27 23:53:58 +02:00
nat-ipv6-masquerade-linux.iptables
nat-ipv6-masquerade-linux.nftables network: use iif/oif instead of iifname/oifname in nftables rules 2024-05-27 23:53:58 +02:00
nat-ipv6-masquerade.xml
nat-ipv6.xml
nat-many-ips-linux.iptables
nat-many-ips-linux.nftables network: use iif/oif instead of iifname/oifname in nftables rules 2024-05-27 23:53:58 +02:00
nat-many-ips.xml
nat-no-dhcp-linux.iptables
nat-no-dhcp-linux.nftables network: use iif/oif instead of iifname/oifname in nftables rules 2024-05-27 23:53:58 +02:00
nat-no-dhcp.xml
nat-tftp-linux.iptables
nat-tftp-linux.nftables network: use iif/oif instead of iifname/oifname in nftables rules 2024-05-27 23:53:58 +02:00
nat-tftp.xml
route-default-linux.iptables
route-default-linux.nftables network: use iif/oif instead of iifname/oifname in nftables rules 2024-05-27 23:53:58 +02:00
route-default.xml