[PATCH firewall 0/3] fix #1965: cache the cluster firewall config

[Arthur Bied-Charreton <a.bied-charreton@proxmox.com>]

The cluster firewall config is is not currently cached, so it is re-
parsed on every load. This can use a noticeable amount of CPU if the
firewall configuration contains large ipsets, for example.

These changes are based on an old series by Stefan Hrdlicka [0]. The
only major diff compared to that series is that the in-memory firewall
config now includes SDN ipsets. Those are not stored in cluster.fw, so
changes to those do not create new versions for it and therefore need to
be handled separately, see commit messages for details.

[0] https://lists.proxmox.com/pipermail/pve-devel/2022-November/055051.html


pve-firewall:

Arthur Bied-Charreton (3):
  firewall: run make tidy
  firewall: parser: factor out error logging
  fix #1965: firewall: cache cluster config

 src/PVE/API2/Firewall/Helpers.pm |   3 +-
 src/PVE/Firewall.pm              | 124 ++++++++++++++++++++++---------
 2 files changed, 89 insertions(+), 38 deletions(-)


Summary over all repositories:
  2 files changed, 89 insertions(+), 38 deletions(-)

-- 
Generated by murpp 0.12.1