Project: mesos
Issue MESOS-4344: Allow operators to assign net_cls major handles to mesos agents
The net_cls cgroup allows operators to assign a 16-bit major and 16-bit minor network handle to tasks associated with a specific net_cls cgroup. In mesos we need to give the operator the ability to fix the 16-bit major handle used in an agent. Fixing the parent handle on the agent allows operators to install default firewall rules using the parent handle to enforce a default policy (say DENY ALL) for all container traffic till the container is allocated a minor handle. A simple way to achieve this requirement is to pass the major handle as a flag to the agent at startup.
Story points: 1