pf: Optionally attempt to preserve rule counter values across ruleset updates
ClosedPublic
Actions

Authored by kp on Apr 15 2021, 5:18 PM.

Details

Reviewers

None

Group Reviewers

network
manpages

Commits

rG898407819d81: pf: Optionally attempt to preserve rule counter values across ruleset updates
rGa5a03901798c: pf: Optionally attempt to preserve rule counter values across ruleset updates
rG42ec75f83aa3: pf: Optionally attempt to preserve rule counter values across ruleset updates

Summary

Usually rule counters are reset to zero on every update of the ruleset.
With keepcounters set pf will attempt to find matching rules between old
and new rulesets and preserve the rule counters.

MFC after: 4 weeks
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp created this revision.Apr 15 2021, 5:18 PM

Herald added a reviewer: manpages. · View Herald TranscriptApr 15 2021, 5:18 PM

Herald added subscribers: melifaro, farrokhi, ae, imp. · View Herald Transcript

kp requested review of this revision.Apr 15 2021, 5:18 PM

Harbormaster completed remote builds in B38598: Diff 87499.Apr 15 2021, 5:18 PM

kp mentioned this in D29669: pf: Kill connections by schedule.Apr 15 2021, 5:27 PM

0mp accepted this revision as: manpages.Apr 17 2021, 10:02 PM

This revision was not accepted when it landed; it landed in state Needs Review.Apr 19 2021, 1:45 PM

Closed by commit rG42ec75f83aa3: pf: Optionally attempt to preserve rule counter values across ruleset updates (authored by kp). · Explain Why

This revision was automatically updated to reflect the committed changes.

kp added a commit: rG42ec75f83aa3: pf: Optionally attempt to preserve rule counter values across ruleset updates.

kp added a commit: rGa5a03901798c: pf: Optionally attempt to preserve rule counter values across ruleset updates.May 11 2021, 3:07 PM

kp added a commit: rG898407819d81: pf: Optionally attempt to preserve rule counter values across ruleset updates.

Revision Contents
Changeset List

Path

Size

lib/

libpfctl/

libpfctl.h

1 line

libpfctl.c

22 lines

sbin/

pfctl/

parse.y

6 lines

pfctl.c

4 lines

pfctl_parser.h

1 line

share/

man/

man5/

pf.conf.5

12 lines

sys/

net/

pfvar.h

3 lines

netpfil/

pf/

pf_ioctl.c

81 lines

Diff 87706

View Options

lib/libpfctl/libpfctl.h

View Options

lib/libpfctl/libpfctl.c

View Options

sbin/pfctl/parse.y

View Options

sbin/pfctl/pfctl.c

View Options

sbin/pfctl/pfctl_parser.h

View Options

share/man/man5/pf.conf.5

View Options

sys/net/pfvar.h

View Options

pf: Optionally attempt to preserve rule counter values across ruleset updatesClosedPublicActions

Details

Diff Detail

Event Timeline

Revision ContentsChangeset List

Diff 87706

lib/libpfctl/libpfctl.h

lib/libpfctl/libpfctl.c

sbin/pfctl/parse.y

sbin/pfctl/pfctl.c

sbin/pfctl/pfctl_parser.h

share/man/man5/pf.conf.5

sys/net/pfvar.h

sys/netpfil/pf/pf_ioctl.c

pf: Optionally attempt to preserve rule counter values across ruleset updates
ClosedPublic
Actions

Revision Contents
Changeset List