summaryrefslogtreecommitdiffstats
path: root/iptables-xml.8
diff options
context:
space:
mode:
authorPhil Sutter <phil@nwl.cc>2021-04-06 10:51:20 +0200
committerFlorian Westphal <fw@strlen.de>2021-04-10 13:58:55 +0200
commita3e81c62e8c5abb4158f1f66df6bbcffd1b33240 (patch)
tree4bf47b14e130d1c71d14b87489f3e7e243524752 /iptables-xml.8
parentfdf64dcdace989589bac441805082e3b1fe6a915 (diff)
nft: Increase BATCH_PAGE_SIZE to support huge rulesets
In order to support the same ruleset sizes as legacy iptables, the kernel's limit of 1024 iovecs has to be overcome. Therefore increase each iovec's size from 128KB to 2MB. While being at it, add a log message for failing sendmsg() call. This is not supposed to happen, even if the transaction fails. Yet if it does, users are left with only a "line XXX failed" message (with line number being the COMMIT line). Signed-off-by: Phil Sutter <phil@nwl.cc> Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'iptables-xml.8')
0 files changed, 0 insertions, 0 deletions