[Bug 1439] Atomically updating/reloading a large set with nft -f is excessively slow

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1439

--- Comment #4 from Timo Sigurdsson <public_timo.s at silentcreek.de> ---
(In reply to kfm from comment #3)
> This seems to be a duplicate of bug 1392, for which I still haven't
> discerned any operational workaround.

Indeed, this seems to be the same issue. I missed that one.

> My view is that some serious thought should be given to supporting ipsets.
> As you have noticed, the present implementation of native sets suffers from
> various bugs and, though it pains me to say it, it just isn't stable enough
> to usurp ipsets at the current time.

Yeah, I also checked whether it's possible to match ipsets with nftables, but
concluded that wasn't the case as I couldn't find any information on it...

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200703/75f07db5/attachment.html>