search

netfoundry / zfw

An EBPF based IPv4/IPv6 firewall with integrations for OpenZiti Zero-Trust Framework edge-routers and tunnellers
GNU General Public License v3.0
33 stars 2 forks source link

Suppress error output when setting tc filter #60

Closed jlin-nf closed 1 month ago

jlin-nf commented 2 months ago

$ sudo zfw -X ens33 -O /opt/openziti/bin/zfw_tc_outbound_track.o -z egress Error: Exclusivity flag on, cannot modify. tc parent already exists : ens33 Set tc filter enable to 1 for egress on ens33

when setting the filter the second time, enabling tc failed (already enabled). but the setting of filter is successful. The error message (Error: Exclusivity flag on, cannot modify.) should be suppressed.

r-caamano commented 1 month ago

Note error was due to zfw attempting to add a parent clsact qdisc to the interface when one already exists. Fix was added to v0.8.5 which checks to see if the parent exist before attempting to add one.