criu/include/netfilter.h

#ifndef __CR_NETFILTER_H__
#define __CR_NETFILTER_H__

struct inet_sk_desc;
extern int nf_lock_connection(struct inet_sk_desc *);
extern int nf_unlock_connection(struct inet_sk_desc *);

struct inet_sk_info;
extern int nf_unlock_connection_info(struct inet_sk_info *);

#endif /* __CR_NETFILTER_H__ */
net: Add code for locking a tcp connection with netfilter Between dump and restore of a tcp conn we have to keep the connection blocked, since the socket doesn't exists in the kernel at this time and any packet from peer will result in RST. Thus, add the -j DROP rule for every connection we're about to repair. Later, when we support containers, this will be extended to stop the whole networking in a CT instead of cherry-peeking connections. It does system("iptables ...") for this, but I'd prefer using the libnetfilter-devel sometime in the future. Signed-off-by: Pavel Emelyanov <xemul@parallels.com> 2012-04-28 17:21:32 +04:00			`#ifndef __CR_NETFILTER_H__`
			`#define __CR_NETFILTER_H__`

			`struct inet_sk_desc;`
headers: Add extern specificator to functions We really have a mess of extern/non-extern declaration of functions in our headers. Always use extern for unification purpose. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com> 2013-11-15 14:04:48 +04:00			`extern int nf_lock_connection(struct inet_sk_desc *);`
			`extern int nf_unlock_connection(struct inet_sk_desc *);`
net: Add code for locking a tcp connection with netfilter Between dump and restore of a tcp conn we have to keep the connection blocked, since the socket doesn't exists in the kernel at this time and any packet from peer will result in RST. Thus, add the -j DROP rule for every connection we're about to repair. Later, when we support containers, this will be extended to stop the whole networking in a CT instead of cherry-peeking connections. It does system("iptables ...") for this, but I'd prefer using the libnetfilter-devel sometime in the future. Signed-off-by: Pavel Emelyanov <xemul@parallels.com> 2012-04-28 17:21:32 +04:00
			`struct inet_sk_info;`
headers: Add extern specificator to functions We really have a mess of extern/non-extern declaration of functions in our headers. Always use extern for unification purpose. Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com> 2013-11-15 14:04:48 +04:00			`extern int nf_unlock_connection_info(struct inet_sk_info *);`
headers: Unify include guards (in comments) and a few fixes - fix names in comments - add empty lines where needed - fix rbtree.h - fix syscall-types.h Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by: Pavel Emelyanov <xemul@parallels.com> 2012-12-25 22:40:24 +04:00
			`#endif /* __CR_NETFILTER_H__ */`