This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


RE: [Xen-devel] [PATCH] Re: network-bridge scriptbreaks networkconnectiv

To: "Herbert Xu" <herbert@xxxxxxxxxxxxxxxxxxx>, "Luciano Miguel Ferreira Rocha" <strange@xxxxxxxxxxxxx>
Subject: RE: [Xen-devel] [PATCH] Re: network-bridge scriptbreaks networkconnectivity
From: "Ian Pratt" <m+Ian.Pratt@xxxxxxxxxxxx>
Date: Tue, 11 Jul 2006 18:51:57 +0100
Cc: xen-devel@xxxxxxxxxxxxxxxxxxx
Delivery-date: Tue, 11 Jul 2006 10:52:36 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index: Acak1Zw9lteIz2PsTaCeBqQ2MQC4hgAPI3hw
Thread-topic: [Xen-devel] [PATCH] Re: network-bridge scriptbreaks networkconnectivity
> Luciano Miguel Ferreira Rocha <strange@xxxxxxxxxxxxx> wrote:
> >
> >> The interaction with host firewall rules has always been a bit
icky, not
> >> least because the xen network scripts typically run after the
> >> firewall scripts (and rename the network device). I've never
> >> what happens to the firewall rules - do they stay with the old eth0
> >> peth0) or do they now apply to the new device name?
> >
> > IIRC, interface names in iptables rules are symbolic, so eth0 means
> > currently stands for eth0.
> Correct.  Only the interface name is compared.

Just to be doubly clear, do you mean that the name is compared at the
time the rule is submitted, or at the time it is evaluated?

I presume the former? In which case, it will end up referring to peth0
rather than eth0 because the rename happens after the rules are
submitted. If the latter, is there a per-packet strcmp or is there some
clever caching?


Xen-devel mailing list

<Prev in Thread] Current Thread [Next in Thread>