Re: [PATCHv2 net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP

2016-12-23 Thread Pablo Neira Ayuso
On Tue, Dec 20, 2016 at 07:14:34PM +0800, Xin Long wrote: > Now when adding an ipt_CLUSTERIP rule, it only checks duplicate config in > clusterip_config_find_get(). But after that, there may be still another > thread to insert a config with the same ip, then it leaves proc_create_data > to do dupli

[PATCHv2 net] netfilter: check duplicate config when initializing in ipt_CLUSTERIP

2016-12-20 Thread Xin Long
Now when adding an ipt_CLUSTERIP rule, it only checks duplicate config in clusterip_config_find_get(). But after that, there may be still another thread to insert a config with the same ip, then it leaves proc_create_data to do duplicate check. It's more reasonable to check duplicate config by ipt