Re: nft 0.8.2 - fails start at boot since staring before iface are up

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



ѽ҉ᶬḳ℠ <vtol@xxxxxxx> wrote:
> 
> > This error happens when using 'meta iif' or 'meta oif', as that needs
> > the interface index (which doesn't exist until the interface is
> > created).
> >
> > You can use 'meta iifname/oifname' instead, that way the name is used
> > and the interface doesn't need to exist.
> > --
> > To unsubscribe from this list: send the line "unsubscribe netfilter" in
> > the body of a message to majordomo@xxxxxxxxxxxxxxx
> > More majordomo info at  http://vger.kernel.org/majordomo-info.html
> 
> Thank you for the fast and swift response. Amendments made.
> 
> If you do not terribly mind me asking, as I would like to understand,
> what is the difference (in parsing) between interface index and
> interface name? Suppose there are advantages to one or the other or else
> there would not be the two of them?

iifname is slightly more expensive as kernel has to compare name rather
than number.

iif/oif will keep working even if the device name is changed.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux