<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - Please allow ipset add and del via the /proc/net/xt_ipset mechanism"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1328">1328</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Please allow ipset add and del via the /proc/net/xt_ipset mechanism
</td>
</tr>
<tr>
<th>Product</th>
<td>ipset
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Hardware</th>
<td>x86_64
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>enhancement
</td>
</tr>
<tr>
<th>Priority</th>
<td>P5
</td>
</tr>
<tr>
<th>Component</th>
<td>default
</td>
</tr>
<tr>
<th>Assignee</th>
<td>netfilter-buglog@lists.netfilter.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>murf@parsetree.com
</td>
</tr></table>
<p>
<div>
<pre>I measure the xt_recent hash table's speed to enter an ip into the hash, and
compared with ipset add speed. recent, via this method:
echo +<addr> >/proc/net/xt_recent/DEFAULT
is 13 times faster than ipset add <addr>
Now, ipset has these advantages against recent:
recent has size limits you must define when you load the module. Ugh.
ipset, on the other hand, at least in the newer versions, (the ones NOT on
centos 6, btw), has no size limit.
So, a list of IP's with CIDRs, like voipbl, takes around 90 seconds to load the
63k ip's. recent will do it in about 7 seconds. (well, estimated, as recent
can handle only 8k entries (or at least so it did over a year ago).)
Can you guys, someday, sometime, enable this other, faster way to load up the
ipset with multiple thousands of addresses?
You know, it might even be faster if you allow a whole batch of + and -addrs in
a file, to be dumped at a single shot:
cat ipfile > /proc/net/xt_ipset/someipset
Many thanks!</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>