Peter Teoh wrote:
> wow....each netstack for each IP zone?

There's one for each zone configured to use an exclusive IP stack instance.

I'm not sure why that's a "wow," though.

>   what is the purpose?

As I said before, it holds the data that used to have static storage
duration in the kernel when we had just a single IP instance.

For example, the root of the IP interface list is here.  Having it in a
per-zone structure means that each zone can have its own list of IP
interfaces.

And the root of the list of ARP entries is here.  Again, it allows each
zone to have completely independent ARP entries.

>   at the
> kernel level, everyone can see and modify each other right?   so I don't
> think it is for privilege segregation - in the security sense?   sorry
> for the newbie question, i will read into these documentation.....slowly
> :-).

No, that's not the reason.  Yes, in the kernel, we're all friends.

-- 
James Carlson         42.703N 71.076W         <carls...@workingcode.com>
_______________________________________________
networking-discuss mailing list
networking-discuss@opensolaris.org

Reply via email to