examples: ifquarantine filters with one instance per CPU - #794
Open
lneto wants to merge 1 commit into
Open
Conversation
lneto
force-pushed
the
claude_percpu_resume
branch
from
September 6, 2026 19:19
c410917 to
3830dda
Compare
lneto
force-pushed
the
claude_examples_percpu
branch
from
September 6, 2026 19:19
03e2cf6 to
5aa5c09
Compare
lneto
force-pushed
the
claude_percpu_resume
branch
from
September 6, 2026 23:06
3830dda to
778a873
Compare
lneto
force-pushed
the
claude_examples_percpu
branch
2 times, most recently
from
September 7, 2026 12:08
9a0dc93 to
f7c56ed
Compare
lneto
force-pushed
the
claude_percpu_resume
branch
from
September 7, 2026 13:58
778a873 to
0bf193e
Compare
lneto
force-pushed
the
claude_examples_percpu
branch
from
September 7, 2026 13:58
f7c56ed to
5ca13dd
Compare
lneto
force-pushed
the
claude_percpu_resume
branch
from
September 7, 2026 14:19
0bf193e to
7a57e49
Compare
lneto
force-pushed
the
claude_examples_percpu
branch
from
September 7, 2026 14:19
5ca13dd to
e18a892
Compare
The filter is a packet hook, the case the percpu object serves, and it took the quarantine set through resume, which the object gained. The control runtime runs it percpu and resumes every instance with the set. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
lneto
force-pushed
the
claude_percpu_resume
branch
from
September 7, 2026 22:43
7a57e49 to
c43eb2f
Compare
lneto
force-pushed
the
claude_examples_percpu
branch
from
September 7, 2026 22:43
e18a892 to
eabd607
Compare
lneto
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The
ifquarantinefilter is a packet hook that keeps no state of its own, the case one runtime per CPU serves, and it could not be one: it takes the quarantine set throughresume, which the percpu object did not have.The control runtime runs the filter as one instance per CPU, sharing the netfilter hook, and hands each instance the set through
percpu:resume.Based on #792, which gives the percpu object that
resume.