[ANNOUNCE] ipset 2.0 released

Jozsef Kadlecsik kadlec at blackhole.kfki.hu
Thu Dec 2 20:32:13 CET 2004


I'm happy to announce ipset 2.0! If you want to

- store multiple IP addresses or port numbers and match against the
  collection at one swoop;
- dynamically update rules against IP addresses or ports without
  performance penalty;
- express complex IP address and port based rulesets with one single
  iptables rule and benefit from the speed of IP sets

then check out


This is a major rewriting of the previous ipset version. The most
important changes are

- Chaining of sets are changed: child sets replaced by bindings
- Kernel-userspace communication reorganized to minimize the
  number of syscalls
- Save and restore functionality implemented
- iphash type reworked: clashing resolved by double-hashing and by
  dynamically growing the set.

Best regards,
E-mail  : kadlec at blackhole.kfki.hu, kadlec at sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

More information about the netfilter-devel mailing list