netfilter: ipset: hash:ip,port,net set type support

Browse source

The module implements the hash:ip,port,net type support in four flavours:
for IPv4 and IPv6, both without and with timeout support. The elements
are three dimensional: IPv4/IPv6 address, protocol/port and IPv4/IPv6
network address/prefix triples. The different prefixes are searched/matched
from the longest prefix to the shortes one (most specific to least).
In other words the processing time linearly grows with the number of
different prefixes in the set.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>

...

This commit is contained in:

Jozsef Kadlecsik 2011-02-01 15:51:00 +01:00 • committed by Patrick McHardy

parent 5663bc30e6

commit 41d22f7b2e

3 changed files with 642 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

10

net/netfilter/ipset/Kconfig

View file

1

net/netfilter/ipset/Makefile

View file

631

net/netfilter/ipset/ip_set_hash_ipportnet.c

View file