Re: Is it possible to employ epoch to simplify managing prison lifecycle

2022-12-23 Thread Alexander V. Chernikov
> On 16 Dec 2022, at 16:29, Mateusz Guzik wrote: > > On 12/16/22, Zhenlei Huang wrote: >> Hi, >> >> While hacking `sys/kern/kern_jail.c` I got lost. >> >> There're lots of ref / unref and flags to prevent visit invalid prison >> while >> concurrent modification is possible and some refs loo

Re: Is it possible to employ epoch to simplify managing prison lifecycle

2022-12-24 Thread Alexander V. Chernikov
> On 23 Dec 2022, at 15:27, Mateusz Guzik wrote: > > On 12/23/22, Alexander V. Chernikov wrote: >> >> >>> On 16 Dec 2022, at 16:29, Mateusz Guzik wrote: >>> >>> On 12/16/22, Zhenlei Huang wrote: >>>> Hi, >>>> &

Re: VNET

2012-06-20 Thread Alexander V. Chernikov
On 19.06.2012 12:56, Sami Halabi wrote: Hi, I want to ask aout VNET jails, i read somehwre that I'm able to run IPFW, but not PF firewall in a cnet jail. is that correct? i want a vnet jail basicly for nat, so natd with ipfw + ipdivert is my 1) You can do nat without vnet. 2) ipfw nat is curre