[PATCH v2 1/1] nwfilter: Check before removing and reinserting iptable base chains

2025-07-16 Thread Dion Bosschieter
being created if they already exist. Possibly speeding up nwfilter by reducing the amount of iptable commands it executes. This however is not part of this patch. Solves: https://gitlab.com/libvirt/libvirt/-/issues/784 Signed-off-by: Dion Bosschieter --- src/nwfilter/nwfilter_ebiptables_driver.c

[PATCH v2 0/1] nwfilter: Check before removing and reinserting iptable base chains

2025-07-16 Thread Dion Bosschieter
filter: Check before removing and reinserting iptable base chains". I also edited nwfilterxml2firewalltest, so it pretends that currently there are no chains and I changed the expected order of the commonRules. Dion Bosschieter (1): nwfilter: Check before removing and reinserting iptable b

[PATCH] nwfilter: Avoid firewall hole during VM startup by checking rule presence

2025-06-12 Thread Dion Bosschieter
operations. Signed-off-by: Dion Bosschieter --- src/nwfilter/nwfilter_ebiptables_driver.c | 79 ++- 1 file changed, 47 insertions(+), 32 deletions(-) diff --git a/src/nwfilter/nwfilter_ebiptables_driver.c b/src/nwfilter/nwfilter_ebiptables_driver.c index 067df6e612

[PATCH] nwfilter: Avoid firewall hole during VM startup by checking rule presence

2025-06-12 Thread Dion Bosschieter
operations. Signed-off-by: Dion Bosschieter --- src/nwfilter/nwfilter_ebiptables_driver.c | 79 ++- 1 file changed, 47 insertions(+), 32 deletions(-) diff --git a/src/nwfilter/nwfilter_ebiptables_driver.c b/src/nwfilter/nwfilter_ebiptables_driver.c index 067df6e612

[PATCH 1/1] nwfilter: Fix deadlock between nwfilter-list and VM startup/migration

2025-02-18 Thread Dion Bosschieter
`nwfilterBindingDelete` to maintain consistent locking order. Signed-off-by: Dion Bosschieter --- src/nwfilter/nwfilter_driver.c | 13 - 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/src/nwfilter/nwfilter_driver.c b/src/nwfilter/nwfilter_driver.c index 8ece91bf7c..58e9fcfd51 100644

[PATCH 0/1] nwfilter: Fix deadlock between nwfilter-list and VM startup/migration

2025-02-18 Thread Dion Bosschieter
`nwfilterBindingDelete` to maintain consistent locking order, as suggested. Fixes: https://gitlab.com/libvirt/libvirt/-/issues/680 Dion Bosschieter (1): nwfilter: Fix deadlock between nwfilter-list and VM startup/migration src/nwfilter/nwfilter_driver.c | 13 - 1 file changed, 8 insertions