diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-04-09 14:15:15 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-04-11 19:22:45 +0200 |
commit | 3ed296118a065caff5600e60d4f7ef18e137f9a0 (patch) | |
tree | 50e6776142bf52a6a3b1ae5ae65631c1d1faa9ca /src/cli.c | |
parent | 628122466c32e7f1795c9754a46e6b6b91e71aa5 (diff) |
src: restore interface to index cache
nftables used to have a cache to speed up interface name <-> index lookup,
restore it using libmnl.
This reduces netlink traffic since if_nametoindex() and if_indextoname() open,
send a request, receive the list of interface and close a netlink socket for
each call. I think this is also good for consistency since nft -f will operate
with the same index number when reloading the ruleset.
The cache is populated by when nft_if_nametoindex() and nft_if_indextoname()
are used for first time. Then, it it released in the output path. In the
interactive mode, it is invalidated after each command.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/cli.c')
-rw-r--r-- | src/cli.c | 2 |
1 files changed, 2 insertions, 0 deletions
@@ -28,6 +28,7 @@ #include <parser.h> #include <erec.h> #include <utils.h> +#include <iface.h> #include <cli.h> #define CMDLINE_HISTFILE ".nft.history" @@ -123,6 +124,7 @@ static void cli_complete(char *line) nft_run(scanner, state, &msgs); erec_print_list(stdout, &msgs); xfree(line); + iface_cache_release(); } static char **cli_completion(const char *text, int start, int end) |