nft filter cgroup

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,
I want to create filter based on cgroup. What works is:
- create cgroup(v1) for net_cls
- define a classid via net_cls.classid
- create filter, that matches this classid
- add process to this cgroup

Since net_cls controller is cgroups v1 and isn't present in cgroups v2,
I wanted to ask, if there is a possibility to use cgroups v2 somehow
with nft.
According to wiki/manpage, nft only supports specifying cgroup as int
id. Is there some way to get an id of an v2 cgroup? Everything I could
find always uses the name (path) of the cgroup.
Are there plans to add filter with cgroups path?

BR, Christian



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux