Peter Turner comments

Repositories
Issues
Comments

Results 2 comments of


                                            Peter Turner

firewalld is unusable with ~60 interfaces added to a zone.

I have tried this with ipsets (with the hash:net,iface type), it actually appears to work for iptables (although I'm not confident that it is matching the interface), but nftables has...

firewalld is unusable with ~60 interfaces added to a zone.

@jjxtra Firewalld 1.3 should be compatible We got around this issue by matching on an ip address subnet on one of our hosts and I switched to policies on another.