[Bug 2784] Add native support for routing domains / VRF

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Tue Oct 24 21:38:35 AEDT 2017


https://bugzilla.mindrot.org/show_bug.cgi?id=2784

--- Comment #27 from Luca Boccassi <luca.boccassi at gmail.com> ---
On Linux "ip vrf exec" unfortunately requires using cgroups V2 on the
system, which as of today latest RC candidates is still missing
important features, so not everyone can use it.

For example it does not implement a CPU controller, which is necessary
to effectively partition the CPUs on a system.
This is a real use case we have in production with the Vyatta vRouter
at AT&T - unfortunately we cannot use cgroups v2 and thus we cannot use
"ip vrf exec". Like our case, there will be many more out there.

Another example are the Long Term Support kernels like 4.4 that are
going to be maintained for 6 years - they either lack the command
altogether or cgroups v2 is even more limited.

For these reasons IMHO it would be worth to add client-side support in
openssh-portable for the Linux case. I'm happy to rework the 2 patches
and test them again if you like.

Thanks!

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list