[Chilli] Coova-Chilli Multi Tenanency Mode
ynezz at true.cz
Thu Feb 7 06:35:22 UTC 2013
Robert White <rwhite at globalgossip.net> [2013-02-07 13:40:21]:
> All rules from up.sh except the following seem to get created:
> ipt_in -p tcp -m tcp --dport $UAMPORT --dst $ADDR -j ACCEPT
And sometimes some other rules :)
> It seems to only ever happen in multi-instance environments so maybe it is
> something to do with iptables locking and not allowing the insertion of the
> rule while another instance is trying to do the same? I'm not sure.
Yes, maybe something like that, I didn't investigated it in the detail either.
I've added simple locking into the coova-chilli init.d script and added
wildcard system wide iptables rules like "-i tun+" and it improved a lot.
More information about the Chilli