WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

[Xen-devel] [PATCH] Serialize iptables calls in hotplug scripts

To: xen-devel@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-devel] [PATCH] Serialize iptables calls in hotplug scripts
From: Jiri Denemark <jdenemar@xxxxxxxxxx>
Date: Thu, 28 May 2009 11:41:24 +0200
Delivery-date: Thu, 28 May 2009 02:42:30 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mutt/1.5.18 (2008-05-17)
Hi,

iptables cannot correctly handle situations when more than one command is
trying to set netfilter rules. In such situations, iptables may fail with
EAGAIN, which results in iptables: Unknown error 18446744073709551615.

Such situation can easily happen when multiple network devices are configured
for a domain as vif hotplug scripts are called in parallel for all of the
network devices.

Attached is a patch which serializes all iptables calls from vif-* hotplug
scripts...

Signed-off-by: Jiri Denemark <jdenemar@xxxxxxxxxx>

Attachment: xen-hotplug-serialize-iptables.patch
Description: Text document

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel
<Prev in Thread] Current Thread [Next in Thread>
  • [Xen-devel] [PATCH] Serialize iptables calls in hotplug scripts, Jiri Denemark <=