[Xen-devel] [PATCH] Serialize iptables calls in hotplug scripts

[Jiri Denemark <jdenemar@xxxxxxxxxx>]

Hi,

iptables cannot correctly handle situations when more than one command is
trying to set netfilter rules. In such situations, iptables may fail with
EAGAIN, which results in iptables: Unknown error 18446744073709551615.

Such situation can easily happen when multiple network devices are configured
for a domain as vif hotplug scripts are called in parallel for all of the
network devices.

Attached is a patch which serializes all iptables calls from vif-* hotplug
scripts...

Signed-off-by: Jiri Denemark <jdenemar@xxxxxxxxxx>

Attachment: xen-hotplug-serialize-iptables.patch
Description: Text document

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel