If you are asking how to load those additional iptables kernel modules without restarting the node or the openvz service, that is very simple.
From a command line on the Node we can view the already loaded iptables kernel modules.
cat /proc/net/ip_tables_matches
udp
tcp
owner
state
.
.
.
Now load the new iptables kernel modules that you have added to /etc/sysconfig/iptables-config or to etc/vz/vz.conf. So, for example if we have added ipt_recent to either of those 2 config files then:
Now view loaded iptables kernel modules again and you will see the new module load.
cat /proc/net/ip_tables_matches
recent
udp
tcp
owner
state
.
.
.
This document explains the difference between those 2 config files.
http://download.swsoft.com/virtuozzo/virtuozzo4.0/docs/en/li n/VzLinuxUG/6167.htm
[Updated on: Wed, 25 January 2012 18:06]
Report message to a moderator