Messages in this thread | | | Date | Tue, 27 Jun 2006 15:55:25 +0400 | From | Andrey Savochkin <> | Subject | Re: [patch 2/6] [Network namespace] Network device sharing by view |
| |
Daniel,
On Tue, Jun 27, 2006 at 01:21:02PM +0200, Daniel Lezcano wrote: > >>>My point is that if you make namespace tagging at routing time, and > >>>your packets are being routed only once, you lose the ability > >>>to have separate routing tables in each namespace. > >> > >>Right. What is the advantage of having separate the routing tables ? > > > > > > Routing is everything. > > For example, I want namespaces to have their private tunnel devices. > > It means that namespaces should be allowed have private routes of local type, > > private default routes, and so on... > > > > Ok, we are talking about the same things. We do it only in a different way:
We are not talking about the same things.
It isn't a technical thing whether route lookup is performed before or after namespace change. It is a fundamental question determining functionality of network namespaces. We are talking about the capabilities namespaces provide.
Your proposal essentially denies namespaces to have their own tunnel or other devices. There is no point in having a device inside a namespace if the namespace owner can't route all or some specific outgoing packets through that device. You don't allow system administrators to completely delegate management of network configuration to namespace owners.
Andrey - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |