<div dir="ltr"><div>Hi Adrian,</div><div><br></div><div>Thanks for you response.<br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Jun 30, 2019 at 2:58 AM Adrian Reber <<a href="mailto:adrian@lisas.de">adrian@lisas.de</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Fri, Jun 28, 2019 at 03:57:28PM +0530, Pradeepkumar Gayam wrote:<br>
> Hello,<br>
> <br>
> My name Pradeep. I'm a student and open source enthusiast. I got introduced<br>
> to CRIU during an academic project and I found it really interesting. I was<br>
> looking for ways to contribute to CRIU and I found GSoC projects. The<br>
> project aimed at replacing iptables with eBPF[0] seems to have right amount<br>
> of complexity for my liking and I would like to work on this project.<br>
> <br>
> I've played around with the tool, I went through documentation little bit<br>
> and I understand how CRIU works in a broad sense. I've started browsing the<br>
> source to understand the flow of execution. I'm listing my observations<br>
> below. I'd appreciate any pointer to help me improve my understanding.<br>
> <br>
> 1. cr_dump_tasks()[1] is the higher level function that is called when we<br>
> do 'criu dump`<br>
> 2. This function in turn calls network_lock()[2]<br>
> 3. network_lock() function then calls iptables_restore()[3] which executes<br>
> the necessary iptables command<br>
> <br>
> So, for this project I probably need to replace the call to<br>
> iptables_restore() function in network_lock_internal().<br>
> <br>
> Is my understanding correct? I'd appreciate any sort help!<br>
<br>
Yes this sounds correct. The idea of that proposal was to replace<br>
calling the external tool 'iptables' with some eBPF code during locking<br>
and unlocking of the network. We have seen some reports where older<br>
versions of iptables resulted in error messages. If CRIU could directly<br>
control the locking and unlocking without an external tool we expect to<br>
have less troubles.<br></blockquote><div>I'm studying eBPF right now. Hoping to make some progress in the coming weeks. <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
You are welcome to work on it, but this would be outside of GSoC.<br>
Projects and students have been selected already some time ago.<br></blockquote><div>I understand that GSoC projects have already been selected and the deadline has passed. I'm doing this out of curiosity. <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
Adrian<br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">Pradeep</div></div></div>