Director
36
Understand pending and active lters
To understand the actions of lter commands such as ltercommit,lterdiscard,andlterdelete, it is helpful to
visualize the pending lter list and the CAM that holds the active lters.
The previous section explained how the active lters are stored in a CAM, which can be thought of as list of active
lters. These lters, which are actively running in the device, may be referred to as active, running, or committed.
Pending lters, that is, lters that have been dened using lteraddand lterins commands but not yet committed,
are kept in a pending lter list that shadows the CAM. These lters may be referred to as pending or uncommitted. The
following table shows which lter commands affect the pending lter list and which affect the CAM.
Commands apply to
Pending lter list CAM
lter add
lter del
lter discard
lter ins
lter list
lter sync
commit
lter clear
lter commit
lter running
As can be seen from the table, most of the time you work with the contents of the pending lter list. When you have the
lters set up the way you want them in the pending lter list, a commit or ltercommit command transfers the con-
tents of the pending lter list to the CAM, activating that lter set-up. (Remeber that commit also changes Director's
default conguration, but ltercommit does not.)
A common workow for changing the Director lter conguration might be as follows.
TochangetheDirectorlterconguration:
Pending lter list
Address Filter
CAM
Address Filter
1 n1.1 ip_proto=UDP action=drop
2 n1.1 m.1
Starting stateFigure 39: