Jarrett Lu writes:
> So far, I don't see a cliff yet. Ed's concern is mostly about not
> cleaning up
> default routes after zones are halted. While I think Ed has a point, I don't
> see zones not cleaning up their default routes upon halting as a disaster.
> We already have situations that default/static routes don't get cleaned up
> after they are no longer needed.
I agree with Ed that failing to remove the routes is sloppy. It means
that a simple reconfiguration ("oh, the router is .2 here and not
.1!") using the documented interfaces results in a broken system --
one with two routes, one good and one bad, leaving the administrator
to clean up after it.
That's not a great idea. It's possible that this would be acceptable
for TX, where all zones behave as a collective and where
administration practices might be more constrained, but I can't see it
being that way otherwise.
A somewhat simple solution could be implemented in zoneadmd. You'd
have to keep track of the routes you add as you add them, and note the
duplicates. Then, when the zones shut down, delete the route when the
last zone using it goes away.
That has the benefit of working for both TX and regular cases, of
allowing the configuration that Ceri Davies wanted, and not leaving
any mess around afterwards.
> Your earlier suggestion about adding zoneid to route(1M) is interesting.
> When ire_zoneid is set explicitly by "zoneid", it's clear who set the ire
> entry, who can use the entry, and who should clean up the entry. It also
> implies that the routing table could have many almost identical entries
> that only differ in ire_zoneid. This may have performance implications
> when finding a matching entry. Anyway, we haven't thought about
> the design enough.
That's possible, but seems like deeper and riskier surgery to me,
particularly for something intended to be released as a patch.
--
James Carlson, Solaris Networking <james.d.carlson at sun.com>
Sun Microsystems / 35 Network Drive 71.232W Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677
