Project

General

Profile

Feature #5197

Global zone should be able to manage NGZ ipf state

Added by Robert Mustacchi about 5 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
networking
Start date:
2014-10-01
Due date:
% Done:

100%

Estimated time:
Difficulty:
Medium
Tags:

Description

This adds command line options to the ipf tooling and the follow up work inside of the kernel to allow the global zone to observe and modify the firewall rule sets of the non-global zone.

History

#1

Updated by Robert Mustacchi about 5 years ago

  • Assignee set to Rob Gulewich
#2

Updated by Electric Monk almost 5 years ago

  • Status changed from New to Closed

git commit 94bdecd9e84ae1042607002db3e64a6849da5874

commit  94bdecd9e84ae1042607002db3e64a6849da5874
Author: Rob Gulewich <robert.gulewich@joyent.com>
Date:   2014-12-11T02:00:29.000Z

    5198 Want alternate global zone rule set for each ipf netstack
    5197 Global zone should be able to manage NGZ ipf state
    Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com>
    Reviewed by: Robert Mustacchi <rm@joyent.com>
    Reviewed by: Dan McDonald <danmcd@omniti.com>
    Reviewed by: Darren Reed <darrenr@fastmail.net>
    Approved by: Richard Lowe <richlowe@richlowe.net>

Also available in: Atom PDF