Re: [libvirt PATCH 00/28] native support for nftables in virtual network driver

2023-05-05 Thread Laine Stump
On 5/4/23 6:47 AM, Daniel P. Berrangé wrote: On Sun, Apr 30, 2023 at 11:19:15PM -0400, Laine Stump wrote: This patch series enables libvirt to use nftables rules rather than iptables *when setting up virtual networks* (it does *not* add nftables support to the nwfilter driver). It accomplishes

Re: [libvirt PATCH 00/28] native support for nftables in virtual network driver

2023-05-05 Thread Laine Stump
On 5/3/23 11:40 AM, Daniel P. Berrangé wrote: On Sun, Apr 30, 2023 at 11:19:15PM -0400, Laine Stump wrote: When I first started on this (long, protracted, repeatedly interrupted for extended periods - many of these patches are > a year old) task, I considered doing an all-at-once complete

Re: [libvirt PATCH 00/28] native support for nftables in virtual network driver

2023-05-04 Thread Daniel P . Berrangé
On Sun, Apr 30, 2023 at 11:19:15PM -0400, Laine Stump wrote: > This patch series enables libvirt to use nftables rules rather than > iptables *when setting up virtual networks* (it does *not* add > nftables support to the nwfilter driver). It accomplishes this by > abstracting several iptables

Re: [libvirt PATCH 00/28] native support for nftables in virtual network driver

2023-05-03 Thread Daniel P . Berrangé
On Sun, Apr 30, 2023 at 11:19:15PM -0400, Laine Stump wrote: > When I first started on this (long, protracted, repeatedly interrupted > for extended periods - many of these patches are > a year old) task, I > considered doing an all-at-once complete replacement of iptables with > nftables, since

Re: [libvirt PATCH 00/28] native support for nftables in virtual network driver

2023-05-03 Thread Ján Tomko
On a Sunday in 2023, Laine Stump wrote: This patch series enables libvirt to use nftables rules rather than iptables *when setting up virtual networks* (it does *not* add nftables support to the nwfilter driver). It accomplishes this by getting these patches in. [... 150 lines delted ...]

Re: [libvirt PATCH 00/28] native support for nftables in virtual network driver

2023-05-03 Thread Michal Prívozník
On 5/1/23 05:19, Laine Stump wrote: > > 45 files changed, 5718 insertions(+), 954 deletions(-) Reviewed-by: Michal Privoznik Michal

[libvirt PATCH 00/28] native support for nftables in virtual network driver

2023-04-30 Thread Laine Stump
This patch series enables libvirt to use nftables rules rather than iptables *when setting up virtual networks* (it does *not* add nftables support to the nwfilter driver). It accomplishes this by abstracting several iptables functions (from viriptables.[ch] called by the virtual network driver