| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <4DDEC793.8040502@genband.com> Date: Thu, 26 May 2011 15:35:15 -0600 From: Chris Friesen <chris.friesen@...band.com> To: "Eric W. Biederman" <ebiederm@...ssion.com> CC: shemminger@...tta.com, netdev@...r.kernel.org, Linux Containers <containers@...ts.osdl.org> Subject: Re: [PATCH] iproute2: Add processless network namespace support. On 05/26/2011 02:58 PM, Eric W. Biederman wrote: > > The goal of this code change is to implement a mechanism such that it is > simple to work with a kernel that is using multiple network namespaces > at once. > > This comes in handy for interacting with vpns where there may be rfc1918 > address overlaps, and different policies default routes, name servers > and the like. > > Configuration specific to a network namespace that would ordinarily be > stored under /etc/ is stored under /etc/netns/<name>. For example if > the dns server configuration is different for your vpn you would create > a file /etc/netns/myvpn/resolv.conf. That would be interesting. Currently I use dnsmasq to keep my DNS servers straight when connecting in to two different corporate VPNs simultaneously. I could see it being interesting trying to remember which shell sessions were running in which network namespace... Chris -- Chris Friesen Software Developer GENBAND chris.friesen@...band.com www.genband.com -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists