[Devel] [PATCH rh8 17/28] ve/kmod/whitelist: Allow IPVS modules autoload in CT

Konstantin Khorenko khorenko at virtuozzo.com
Tue Apr 13 11:25:27 MSK 2021


From: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>

we still need to add ip_vs module in /etc/modules-load.d/vz.conf
to be able to use ipvs in CT, all other modules are request_module'ed
from ip_vs.

https://jira.sw.ru/browse/PSBM-63883
Signed-off-by: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>
Reviewed-by: Andrew Vagin <avagin at virtuozzo.com>

(cherry picked from vz7 commit
 8852410899b0 ("ve/net/ipvs: allow IPVS modules autoload in CT"))

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/kmod.c | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index 322fc29f0045..697811c5a9f2 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -264,6 +264,22 @@ static const char * const ve0_allowed_mod[] = {
 
 	"rtnl-link-dummy",
 	"rtnl-link-vxlan",
+
+	/* IPVS */
+	"ip_vs_ftp",
+	"ip_vs_nq",
+	"ip_vs_wlc",
+	"ip6t_ipvs",
+	"ipt_ipvs",
+	"ip_vs_rr",
+	"ip_vs_pe_sip",
+	"ip_vs_lblc",
+	"ip_vs_wrr",
+	"ip_vs_sed",
+	"ip_vs_dh",
+	"ip_vs_sh",
+	"ip_vs_lblcr",
+	"ip_vs_lc",
 };
 
 /*
-- 
2.28.0



More information about the Devel mailing list