Feature #8204
openfirewall: support for hot reload of firewall mode rules
Description
Rule reloading without restarts is not yet supported for firewall mode rules.
This implies that users need to restart Suricata whenever there is a need for to update firewall mode rules, and this can cause interruptions to packet processing, packet losses and cause flows to be re-categorized as midstream.
It would be useful to have some in built support to hot-reload firewall mode rules (similar to what exists for the existing IPS/IDS rules) without need for restarts.
Updated by Victor Julien 22 days ago
- Subject changed from Firewall mode: Support for hot reload of firewall mode rules to firewall: support for hot reload of firewall mode rules
It appears to be working for me. How are you concluding it is not supported?
Updated by Victor Julien 22 days ago
Actually, it only works when not specifying the firewall rule file on the commandline. This is similar to using the -S option in regular rules. However it turns out the regular file loading didn't properly work, see #8206.
Updated by Victor Julien 10 days ago
- Blocked by Bug #8206: firewall: loading rules only through yaml fails added