firewalld general observations

John Griffiths fedora.jrg01 at grifent.com
Sat Jan 25 12:42:48 UTC 2014


I may be entirely wrong in my observation, so please correct me where I 
am wrong.

I observe that firewalld is very flexible and powerful and will add and 
delete IPs without having to restart. Zones may be switched on the fly. 
The code is changing at a rapid pace. And, what seems to be a big one to 
me, there are more than one way to do something.

Having more than one way to configure essentially the same operation 
seems to me would add to the code complexity. Complexity often leads to 
code maintenance issues. Not saying there are any. Complexity leads to 
user confusion such as I am having now. Rapidly developing code causes 
documentation lag; one reason this list is so valuable.

I am a developer professionally. If I am having issues understanding, 
then how about someone who is strictly a user? Maybe no one else has the 
issue of over 8000 IPs being dropped at the firewall, but I certainly do 
and I am finding it hard to address with my understanding of firewalld.

Thanks to the developers for the hard work. Hope someone with first hand 
knowledge of the development can set me straight.

Regards,
John


More information about the firewalld-users mailing list