2fbb067b56
Previously, firewalld rules were applied to configuration, then firewalld reloaded to pick up all the new rules. Reloading firewalld can be disruptive because it sets all chains to a DROP policy while building up its firewall rules, breaking open connections. This change switches to applying rules both permanently (to config) and immediately, such that no reload is required. Change-Id: I8e48b7827b33bdd2061d0e89c905bea8e29f60e8
8 lines
283 B
YAML
8 lines
283 B
YAML
---
|
|
features:
|
|
- |
|
|
Modifies public API firewalld rules to be applied immediately to a running
|
|
firewalld service. This requires firewalld to be running, but avoids
|
|
reloading firewalld, which is disruptive due to the way in which firewalld
|
|
builds its firewall chains.
|