mirror of
https://github.com/apache/nuttx-apps.git
synced 2026-08-02 20:59:05 +00:00
2b0a4a20f5
the kernel can only prevent the concurrency of s/getsockopt, but iptables will call these interfaces multiple times at a time. We need to wait for one iptables to complete before executing the second one, otherwise the data will be overwritten. iptables flow: get current iptables entries [1] -> add new entry 2 [1,2] -> set to kernel [1,2] get current iptables entries [1] -> add new entry 3 [1,3] -> set to kernel [1,3] entry 2 is lost Signed-off-by: zhanghongyu <zhanghongyu@xiaomi.com>
37 lines
906 B
Text
37 lines
906 B
Text
#
|
|
# For a description of the syntax of this configuration file,
|
|
# see the file kconfig-language.txt in the NuttX tools repository.
|
|
#
|
|
|
|
config SYSTEM_IPTABLES
|
|
tristate "'iptables' command"
|
|
default n
|
|
depends on NET_IPTABLES && NET_IPv4
|
|
select NETUTILS_NETLIB
|
|
---help---
|
|
Enable support for the 'iptables' command.
|
|
|
|
config SYSTEM_IP6TABLES
|
|
tristate "'ip6tables' command"
|
|
default n
|
|
depends on NET_IPTABLES && NET_IPv6
|
|
select NETUTILS_NETLIB
|
|
---help---
|
|
Enable support for the 'ip6tables' command.
|
|
|
|
if SYSTEM_IPTABLES || SYSTEM_IP6TABLES
|
|
|
|
config SYSTEM_IPTABLES_PRIORITY
|
|
int "iptables & ip6tables task priority"
|
|
default 100
|
|
|
|
config SYSTEM_IPTABLES_STACKSIZE
|
|
int "iptables & ip6tables stack size"
|
|
default DEFAULT_TASK_STACKSIZE
|
|
|
|
config SYSTEM_IPTABLES_LOCK_FILE_PATH
|
|
string "File lock path to prevent concurrent overwrite"
|
|
default "/tmp/iptables.lock"
|
|
depends on FS_LOCK_BUCKET_SIZE > 0
|
|
|
|
endif
|