Messages in this thread | | | Date | Sat, 18 Sep 1999 17:13:36 -0500 (CDT) | From | Oliver Xymoron <> | Subject | Flexible policy for resource limits and quotas |
| |
It occurred to me last night that the netfilter model could easily be applied to resource limits, quotas, process accounting, etc., which would allow much greater flexibility and potentially unify several disparate pieces of code. I've spent a little time looking at the code and I thought I'd solicit some opinions before I dive in.
What I'm thinking of is changing the net/core/netfilter code to be generic. Only some of the code in it is network specific - there's the NF_DROP code which calls kfree_skb and some debugging code. So I think it should be relatively easy to make a generic replacement for nf_hook_slow and nf_iterate, etc., that take longs rather than pointers, then change NF_HOOK to do a bit of casting. Then, it becomes easy to add QUOTA_HOOK and RLIM_HOOK taking different types of arguments. Finally add an ops table to call subsystem-specific functions like kfree_skb and possibly debugging funcs.
-- "Love the dolphins," she advised him. "Write by W.A.S.T.E.."
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |