On Tue, 2008-02-12 at 13:37 +0000, Andrew Suffield wrote: > > It would be nice if the outage could be completely > eliminated. However, this is a problem for the kernel people - we'd > need atomic whole-configuration changes in netfilter and tc, rather > than the current rule-at-a-time system.
Indeed, but we could take quite a large step towards that goal by only modifying an existing configuration to make the changes needed to affect an interface change. Anyway, unless this topic takes an interesting turn in dicussion, I will stop beating this drum. I've put the idea out there for consideration but unfortunately don't really have the time to hack on it myself. My perl-fu is getting older and rustier as each day goes by as well. Cheers, b.
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users