Of greatest interest to me were the descriptions given by Patrick
McHardy for his new filtering framework, where all the complexity
is in userspace and the kernel just runs filtering scripts and
lookup datastructures fed to it by the user tools. In short, I
think this stuff is great, and unlike some folks I don't think this
will decrease netfilter participation by other developers at all.
And frankly, iptables was absolutely too accessible to
contributors. Look at how much stinking poo is in the
patch-o-matic, oft called "crap-o-matic".
But then voting season comes and reminds you that all those
Americans that are individually sane and normal tend to be
collectively crazy and very odd. And that's when you really notice
that you're not in Finland any more.
starts a blog
to post comments)