diff options
author | David Gibson <david@gibson.dropbear.id.au> | 2023-01-05 15:26:25 +1100 |
---|---|---|
committer | Stefano Brivio <sbrivio@redhat.com> | 2023-01-13 01:07:12 +0100 |
commit | b93d025d50dcc2c058b9eb3b67b76da56d27fcba (patch) | |
tree | 2cd3ba469f55642e3f0523bd0364507ffde58bf0 /contrib/selinux | |
parent | 8d503e825f42289eb9d732b8354804f1f0e2ecfb (diff) | |
download | passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.gz passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.bz2 passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.lz passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.xz passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.tar.zst passt-b93d025d50dcc2c058b9eb3b67b76da56d27fcba.zip |
udp: Don't use separate sockets to listen for spliced packets
Currently, when ports are forwarded inbound in pasta mode, we open two
sockets for incoming traffic: one listens on the public IP address and will
forward packets to the tuntap interface. The other listens on localhost
and forwards via "splicing" (resending directly via sockets in the ns).
Now that we've improved the logic about whether we "splice" any individual
packet, we don't need this. Instead we can have a single socket bound to
0.0.0.0 or ::, marked as able to splice and udp_sock_handler() will deal
with each packet as appropriate.
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'contrib/selinux')
0 files changed, 0 insertions, 0 deletions