Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feature request: allow to use --wait [seconds] in firewall.bash #108

Open
shk3bq4d opened this issue Mar 19, 2024 · 0 comments
Open

feature request: allow to use --wait [seconds] in firewall.bash #108

shk3bq4d opened this issue Mar 19, 2024 · 0 comments

Comments

@shk3bq4d
Copy link

Hello,

Thank you for all the work all those years.

from iptables man page:

       -w, --wait [seconds]
              Wait for the xtables lock.  To prevent multiple instances of the program from running concur‐
              rently,  an attempt will be made to obtain an exclusive lock at launch.  By default, the pro‐
              gram will exit if the lock cannot be obtained.   This  option  will  make  the  program  wait
              (indefinitely or for optional seconds) until the exclusive lock can be obtained.

       -W, --wait-interval microseconds
              Interval  to  wait  per each iteration.  When running latency sensitive applications, waiting
              for the xtables lock for extended durations may not be acceptable. This option will make each
              iteration  take  the  amount of time specified. The default interval is 1 second. This option
              only works with -w.

currently the firewall.bash template silently ignores iptables command that fail for any reason.

One such reason could be a competing iptables command run by another service (docker, wireguard, anything similar). While dependencies between services is none of the concern of this role, allowing to use the --wait [seconds] in each instantiation of the iptables binary may improve the end result of starting service (even though again, such problems should be solved differently).

I'll try to come up with a MR to see if this gathers interest.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant