|
 |
43df5c |
Adapted version of
|
|
|
43df5c |
|
|
|
43df5c |
commit 65801d02a482befd2745c792d6596ec75d434934
|
|
|
43df5c |
Author: Dan Williams <dcbw@redhat.com>
|
|
|
43df5c |
Date: Mon Apr 10 12:35:18 2017 -0500
|
|
|
43df5c |
|
|
|
43df5c |
iptables-restore.8: document -w/-W options
|
|
|
43df5c |
|
|
|
43df5c |
Fixes: 999eaa241212 ("iptables-restore: support acquiring the lock.")
|
|
|
43df5c |
Signed-off-by: Dan Williams <dcbw@redhat.com>
|
|
|
43df5c |
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
|
43df5c |
|
|
|
43df5c |
diff -up iptables-1.4.21/iptables/iptables-restore.8.in.restore_wait_man iptables-1.4.21/iptables/iptables-restore.8.in
|
|
|
43df5c |
--- iptables-1.4.21/iptables/iptables-restore.8.in.restore_wait_man 2017-04-20 17:33:23.386401192 +0200
|
|
|
43df5c |
+++ iptables-1.4.21/iptables/iptables-restore.8.in 2017-04-20 17:35:13.562713997 +0200
|
|
|
43df5c |
@@ -23,9 +23,11 @@ iptables-restore \(em Restore IP Tables
|
|
|
43df5c |
.P
|
|
|
43df5c |
ip6tables-restore \(em Restore IPv6 Tables
|
|
|
43df5c |
.SH SYNOPSIS
|
|
|
43df5c |
-\fBiptables\-restore\fP [\fB\-chntvV\fP] [\fB\-M\fP \fImodprobe\fP]
|
|
|
43df5c |
+\fBiptables\-restore\fP [\fB\-chntvV\fP] [\fB\-w\fP \fIsecs\fP]
|
|
|
43df5c |
++[\fB\-W\fP \fIusecs\fP] [\fB\-M\fP \fImodprobe\fP]
|
|
|
43df5c |
.P
|
|
|
43df5c |
-\fBip6tables\-restore\fP [\fB\-chntvV\fP] [\fB\-M\fP \fImodprobe\fP]
|
|
|
43df5c |
+\fBip6tables\-restore\fP [\fB\-chntvV\fP] [\fB\-w\fP \fIsecs\fP]
|
|
|
43df5c |
++[\fB\-W\fP \fIusecs\fP] [\fB\-M\fP \fImodprobe\fP]
|
|
|
43df5c |
[\fB\-T\fP \fIname\fP]
|
|
|
43df5c |
.SH DESCRIPTION
|
|
|
43df5c |
.PP
|
|
|
43df5c |
@@ -54,6 +56,21 @@ Print additional debug info during rules
|
|
|
43df5c |
\fB\-V\fP, \fB\-\-version\fP
|
|
|
43df5c |
Print the program version number.
|
|
|
43df5c |
.TP
|
|
|
43df5c |
+\fB\-w\fP, \fB\-\-wait\fP [\fIseconds\fP]
|
|
|
43df5c |
+Wait for the xtables lock.
|
|
|
43df5c |
+To prevent multiple instances of the program from running concurrently,
|
|
|
43df5c |
+an attempt will be made to obtain an exclusive lock at launch. By default,
|
|
|
43df5c |
+the program will exit if the lock cannot be obtained. This option will
|
|
|
43df5c |
+make the program wait (indefinitely or for optional \fIseconds\fP) until
|
|
|
43df5c |
+the exclusive lock can be obtained.
|
|
|
43df5c |
+.TP
|
|
|
43df5c |
+\fB\-W\fP, \fB\-\-wait-interval\fP \fImicroseconds\fP
|
|
|
43df5c |
+Interval to wait per each iteration.
|
|
|
43df5c |
+When running latency sensitive applications, waiting for the xtables lock
|
|
|
43df5c |
+for extended durations may not be acceptable. This option will make each
|
|
|
43df5c |
+iteration take the amount of time specified. The default interval is
|
|
|
43df5c |
+1 second. This option only works with \fB\-w\fP.
|
|
|
43df5c |
+.TP
|
|
|
43df5c |
\fB\-M\fP, \fB\-\-modprobe\fP \fImodprobe_program\fP
|
|
|
43df5c |
Specify the path to the modprobe program. By default, iptables-restore will
|
|
|
43df5c |
inspect /proc/sys/kernel/modprobe to determine the executable's path.
|