[pve-devel] [PATCH] add ips feature v5

Dietmar Maurer dietmar at proxmox.com
Thu Mar 20 10:04:43 CET 2014


> I was to avoid going into each tap-out device then  -g PVEFW-SET-ACCEPT-
> MARK.
> go directly to vmbr-OUT

Sorry, I do not understand why that is required. Maybe this is only an optimization?
If so, please can we optimize later (after doing benchmarks)?


More information about the pve-devel mailing list