aboutgitcodebugslistschat
path: root/contrib/selinux
diff options
context:
space:
mode:
authorDavid Gibson <david@gibson.dropbear.id.au>2023-01-05 15:26:25 +1100
committerStefano Brivio <sbrivio@redhat.com>2023-01-13 01:07:12 +0100
commitb93d025d50dcc2c058b9eb3b67b76da56d27fcba (patch)
tree2cd3ba469f55642e3f0523bd0364507ffde58bf0 /contrib/selinux
parent8d503e825f42289eb9d732b8354804f1f0e2ecfb (diff)
downloadpasst-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar
passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.gz
passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.bz2
passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.lz
passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.xz
passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.zst
passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.zip
udp: Don't use separate sockets to listen for spliced packets
Currently, when ports are forwarded inbound in pasta mode, we open two sockets for incoming traffic: one listens on the public IP address and will forward packets to the tuntap interface. The other listens on localhost and forwards via "splicing" (resending directly via sockets in the ns). Now that we've improved the logic about whether we "splice" any individual packet, we don't need this. Instead we can have a single socket bound to 0.0.0.0 or ::, marked as able to splice and udp_sock_handler() will deal with each packet as appropriate. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'contrib/selinux')
0 files changed, 0 insertions, 0 deletions