[Devel] [PATCH RH9 09/20] ve/kmod/whitelist: Allow IPVS modules autoload in CT

Kirill Tkhai ktkhai at virtuozzo.com
Fri Oct 8 12:51:19 MSK 2021


From: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>

we still need to add ip_vs module in /etc/modules-load.d/vz.conf
to be able to use ipvs in CT, all other modules are request_module'ed
from ip_vs.

https://jira.sw.ru/browse/PSBM-63883
Signed-off-by: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>
Reviewed-by: Andrew Vagin <avagin at virtuozzo.com>

(cherry picked from vz7 commit
 8852410899b0 ("ve/net/ipvs: allow IPVS modules autoload in CT"))

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/kmod.c |   16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index ddf44c79c851..be0908452d7b 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -262,6 +262,22 @@ static const char * const ve0_allowed_mod[] = {
 
 	"rtnl-link-dummy",
 	"rtnl-link-vxlan",
+
+	/* IPVS */
+	"ip_vs_ftp",
+	"ip_vs_nq",
+	"ip_vs_wlc",
+	"ip6t_ipvs",
+	"ipt_ipvs",
+	"ip_vs_rr",
+	"ip_vs_pe_sip",
+	"ip_vs_lblc",
+	"ip_vs_wrr",
+	"ip_vs_sed",
+	"ip_vs_dh",
+	"ip_vs_sh",
+	"ip_vs_lblcr",
+	"ip_vs_lc",
 };
 
 /*




More information about the Devel mailing list