[
https://issues.apache.org/jira/browse/MESOS-4262?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15094334#comment-15094334
]
Cong Wang commented on MESOS-4262:
----------------------------------
I am a kernel developer, probably I know it more than you. ;) But still, since
we only have port range for network isolation and we do have a port range based
way to classify the packets, why do we need another one before we have
something other than port range?
Please describe your use case so that we can know if we could just use the
existing way.
For the code, please take a look at https://reviews.apache.org/r/31505/.
> Enable net_cls subsytem in cgroup infrastructure
> ------------------------------------------------
>
> Key: MESOS-4262
> URL: https://issues.apache.org/jira/browse/MESOS-4262
> Project: Mesos
> Issue Type: Improvement
> Components: containerization
> Reporter: Avinash Sridharan
> Assignee: Avinash Sridharan
> Labels: container, mesosphere
>
> Currently the control group infrastructure within mesos supports only the
> memory and CPU subsystems. We need to enhance this infrastructure to support
> the net_cls subsystem as well. Details of the net_cls subsystem and its
> use-cases can be found here:
> https://www.kernel.org/doc/Documentation/cgroups/net_cls.txt
> Enabling the net_cls will allow us to provide operators to, potentially,
> regulate framework traffic on a per-container basis.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
