netfilter: ipset: Introduction of new commands and protocol version 7

Browse source

Two new commands (IPSET_CMD_GET_BYNAME, IPSET_CMD_GET_BYINDEX) are
introduced. The new commands makes possible to eliminate the getsockopt
operation (in iptables set/SET match/target) and thus use only netlink
communication between userspace and kernel for ipset. With the new
protocol version, userspace can exactly know which functionality is
supported by the running kernel.

Both the kernel and userspace is fully backward compatible.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>

...

This commit is contained in:

Jozsef Kadlecsik 2018-10-27 15:07:40 +02:00

parent 29edbc3ebd

commit 23c42a403a

3 changed files with 160 additions and 25 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

19

include/uapi/linux/netfilter/ipset/ip_set.h

View file