<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body><span class="vcard"><a class="email" href="mailto:antonio.ojea.garcia@gmail.com" title="Antonio Ojea <antonio.ojea.garcia@gmail.com>"> <span class="fn">Antonio Ojea</span></a>
</span> changed
<a class="bz_bug_link
bz_status_NEW "
title="NEW - Regression: iptables lock is now waited for without --wait"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1728">bug 1728</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">Priority</td>
<td>P5
</td>
<td>P1
</td>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>antonio.ojea.garcia@gmail.com
</td>
</tr>
<tr>
<td style="text-align:right;">Severity</td>
<td>normal
</td>
<td>major
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - Regression: iptables lock is now waited for without --wait"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1728#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - Regression: iptables lock is now waited for without --wait"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1728">bug 1728</a>
from <span class="vcard"><a class="email" href="mailto:antonio.ojea.garcia@gmail.com" title="Antonio Ojea <antonio.ojea.garcia@gmail.com>"> <span class="fn">Antonio Ojea</span></a>
</span></b>
<pre>This change in behavior is problematic for environments like Kubernetes that
heavily use iptables, because applications that were not counting on wait for a
lock will now start blocking.
Despite a lot of environments are using iptables-nft these days, there is
always a long tail in the industry with environments that are still using
iptables-legacy.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>