From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <w.bumiller@proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits))
 (No client certificate requested)
 by lists.proxmox.com (Postfix) with ESMTPS id 5626F9072
 for <pve-devel@lists.proxmox.com>; Thu, 17 Nov 2022 11:38:47 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
 by firstgate.proxmox.com (Proxmox) with ESMTP id 324B42AF86
 for <pve-devel@lists.proxmox.com>; Thu, 17 Nov 2022 11:38:17 +0100 (CET)
Received: from proxmox-new.maurer-it.com (proxmox-new.maurer-it.com
 [94.136.29.106])
 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
 key-exchange X25519 server-signature RSA-PSS (2048 bits))
 (No client certificate requested)
 by firstgate.proxmox.com (Proxmox) with ESMTPS
 for <pve-devel@lists.proxmox.com>; Thu, 17 Nov 2022 11:38:16 +0100 (CET)
Received: from proxmox-new.maurer-it.com (localhost.localdomain [127.0.0.1])
 by proxmox-new.maurer-it.com (Proxmox) with ESMTP id 0C067445D8;
 Thu, 17 Nov 2022 11:38:16 +0100 (CET)
Date: Thu, 17 Nov 2022 11:38:15 +0100
From: Wolfgang Bumiller <w.bumiller@proxmox.com>
To: Roland <devzero@web.de>
Cc: Proxmox VE development discussion <pve-devel@lists.proxmox.com>,
 Stefan Hrdlicka <s.hrdlicka@proxmox.com>
Message-ID: <20221117103815.ujlsh3brqoapiuy2@casey.proxmox.com>
References: <20221024143359.4194299-1-s.hrdlicka@proxmox.com>
 <20221024143359.4194299-2-s.hrdlicka@proxmox.com>
 <20221117094856.grwopspovz7h526w@casey.proxmox.com>
 <12ddfc25-7445-064e-7c6a-beaacab9d17a@web.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <12ddfc25-7445-064e-7c6a-beaacab9d17a@web.de>
X-SPAM-LEVEL: Spam detection results: =?UTF-8?Q?0=0A=09?=AWL 0.230 Adjusted
 score from AWL reputation of From: =?UTF-8?Q?address=0A=09?=BAYES_00 -1.9
 Bayes spam probability is 0 to 1%
 KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict
 =?UTF-8?Q?Alignment=0A=09?=SPF_HELO_NONE 0.001 SPF: HELO does not publish an
 SPF =?UTF-8?Q?Record=0A=09?=SPF_PASS -0.001 SPF: sender matches SPF record
Subject: Re: [pve-devel] [PATCH firewall/cluster 1/2] fix #1965: cache
 firewall/cluster.fw file
X-BeenThere: pve-devel@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/>
List-Post: <mailto:pve-devel@lists.proxmox.com>
List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2022 10:38:47 -0000

On Thu, Nov 17, 2022 at 11:23:19AM +0100, Roland wrote:
> nice!
> 
> btw, what about this one ?
> 
> https://bugzilla.proxmox.com/show_bug.cgi?id=3909#c3
> 
> actually, the firewall stuff is getting blindly executed every 10
> seconds, that's causing a lot of noise.
> 
> couldn't/shouldn't this be handled more intelligenty ?

I've been experimenting with a more event-driven approach but I can't
give you an ETA on when that'll happen as it's a lot more involved as it
requires support by our cluster-filesystem (since editing files on
another node needs to properly propagate events all the way through to
the firewall daemon on the other affected nodes), which requires a lot
more scrutiny.