[Bug 1328] Please allow ipset add and del via the /proc/net/xt_ipset mechanism

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Tue Mar 26 15:11:18 CET 2019


https://bugzilla.netfilter.org/show_bug.cgi?id=1328

Jozsef Kadlecsik <kadlec at netfilter.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kadlec at netfilter.org

--- Comment #1 from Jozsef Kadlecsik <kadlec at netfilter.org> ---
It is not surprising that the proc interface is faster than the netlink one.
But you can already use the restore mode of ipset to add multiple number of
elements to a set. It's much faster than adding the elements individually.

Sorry, but I do not plan to add a proc file interface to ipset. The main reason
is that ipset elements may have options (timeout, comment, counters, etc.)
which would need to be parsed in the proc interface too.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20190326/ca996fbb/attachment.html>


More information about the netfilter-buglog mailing list