iptables can take a long time to run #14

Closed
opened 2024-07-16 06:17:08 +01:00 by danny · 12 comments
danny commented 2024-07-16 06:17:08 +01:00 (Migrated from gitlab.keyop.co.uk)

E.g. when starting:

INFO   [2024-07-16T06:16:08+01:00] Checking for old iptables rules              
INFO   [2024-07-16T06:16:29+01:00] Adding NFQUEUE rule to 'filter' table: -p tcp -d 10.0.0.0/8 --dport 80 -m state --state NEW -j NFQUEUE --queue-num 100 --queue-bypass -m comment --comment _nfq_forwarder_ 
E.g. when starting: ``` INFO [2024-07-16T06:16:08+01:00] Checking for old iptables rules INFO [2024-07-16T06:16:29+01:00] Adding NFQUEUE rule to 'filter' table: -p tcp -d 10.0.0.0/8 --dport 80 -m state --state NEW -j NFQUEUE --queue-num 100 --queue-bypass -m comment --comment _nfq_forwarder_ ```
danny commented 2024-07-16 06:27:58 +01:00 (Migrated from gitlab.keyop.co.uk)

Some debug shows this is because we're opening the SSH connection after deleting the rules.
This should be opened on demand instead.

Some debug shows this is because we're opening the SSH connection after deleting the rules. This should be opened on demand instead.
danny commented 2024-07-16 16:12:16 +01:00 (Migrated from gitlab.keyop.co.uk)

We should also not treat this as the only ssh connection - as part of #3 we're going to want to handle multiple tunnels.

Suggest we initially handle only a single ssh connection, but as a single element list of connections.

We should also not treat this as the _only_ ssh connection - as part of #3 we're going to want to handle multiple tunnels. Suggest we initially handle only a single ssh connection, but as a single element list of connections.
danny commented 2026-07-04 13:33:51 +01:00 (Migrated from gitlab.keyop.co.uk)

Claude is now tackling this

Claude is now tackling this
danny commented 2026-07-04 13:36:14 +01:00 (Migrated from gitlab.keyop.co.uk)

mentioned in commit 30722b0351

mentioned in commit 30722b03512d6d76d0deb281f7bd615ff8987253
danny commented 2026-07-04 13:36:41 +01:00 (Migrated from gitlab.keyop.co.uk)

mentioned in merge request !56

mentioned in merge request !56
danny commented 2026-07-04 13:43:58 +01:00 (Migrated from gitlab.keyop.co.uk)

mentioned in commit bb1d7e6941

mentioned in commit bb1d7e6941d9fd3149023c05b76ac3f839107720
danny (Migrated from gitlab.keyop.co.uk) closed this issue 2026-07-04 13:44:39 +01:00
danny commented 2026-07-04 13:44:40 +01:00 (Migrated from gitlab.keyop.co.uk)

Should be resolved, tests Ok and seems to behave.

Should be resolved, tests Ok and seems to behave.
danny commented 2026-07-04 15:41:51 +01:00 (Migrated from gitlab.keyop.co.uk)

mentioned in commit bcf6133093

mentioned in commit bcf6133093d910a6f27ccc5f919e081efb189b81
danny commented 2026-07-04 16:55:17 +01:00 (Migrated from gitlab.keyop.co.uk)

mentioned in merge request !58

mentioned in merge request !58
danny commented 2026-07-06 07:42:15 +01:00 (Migrated from gitlab.keyop.co.uk)

mentioned in commit 6b1661a52e

mentioned in commit 6b1661a52e8ca8554433d0ff93238dcda190d54c
danny commented 2026-07-06 07:42:15 +01:00 (Migrated from gitlab.keyop.co.uk)

mentioned in commit 6572295955

mentioned in commit 6572295955edeba779004cb8174c88f5bf23b4c0
danny commented 2026-07-06 07:42:17 +01:00 (Migrated from gitlab.keyop.co.uk)

mentioned in commit 7fd8eaf4c6

mentioned in commit 7fd8eaf4c6dade2ad7a6745486a8f2c74ae44e72
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
keyop-go/nfq_forwarder#14
No description provided.