Hi Everyone,
I wish to use iptables on a host that will be hosting a large number of
VMs for customers. IPtables will do some basic "managed firewalling" for
them.
My question is, how expensive are having lots of custom chains? My idea
is to create one child chain per VM, with the idea to cut down the
amount of rules evaluated (i.e. a parent chain would only jump to a
child chain if the dest IP matches) - does this sound like a good idea?
Thanks
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
