[Bug 1764] mapping IPv4 interval to IPv4 interval works for anonymous maps, but not for named maps

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Fri Aug 16 08:56:36 CEST 2024


https://bugzilla.netfilter.org/show_bug.cgi?id=1764

--- Comment #2 from Karel Rericha <karel at unitednetworks.cz> ---
type ipv4_addr : interval ipv4_addr

Works! Sry I did not find it anywhere in docs or examples.

Anyway this syntax is misleading and inconsistent. Specifying interval for map
key by flag and for map value by type parameter is not good idea. BTW I guess
same bad situation is there with concatenations (say you want singleton in the
middle of concatenation).

IMHO best solution is the last one you proposing:

a) for backwards compatibility keep interval flag logic as it is (and may be
deprecate it in future)

b) new syntax for interval should precede type specifier:

nft add map t m { type interval ipv4_addr: interval ipv4_addr }

nft add set t s { type interval ipv4_addr . inet_service . interval ipv4_addr }


This is much easier to read and comprehend.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20240816/2eecc500/attachment.html>


More information about the netfilter-buglog mailing list