April 18, 2017
3:30 p.m.
I think docker or lxc may help you. You run the process(es) in a container and attach a tap interface to the container, the process inside the container can only see the attached interface. Regards, 2017-04-18 4:28 GMT-03:00 Lev Olshvang <levonshe@yandex.com>:
Hi all,
I would like to constrain process (by name) or group of process to specific network interface and to specific port.
Please advice if there is some cgroups controller or netfilter module?
ThanX, Lev
_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
-- “If you're going to try, go all the way. Otherwise, don't even start. ..." Charles Bukowski