Skip to content

K
Kernel

openeuler / Kernel
12 个月 前同步成功

通知 5
Star 0
Fork 0
K
Kernel

体验新版 GitCode，发现更多精彩内容 >>

切换分支/标签
  1. 13 5月, 2015 3 次提交
  3. 16 9月, 2014 1 次提交
  5. 06 3月, 2014 1 次提交
    • J
      netfilter: ipset: add forceadd kernel support for hash set types · 07cf8f5a
      由 Josh Hunt 提交于 
      Adds a new property for hash set types, where if a set is created
with the 'forceadd' option and the set becomes full the next addition
to the set may succeed and evict a random entry from the set.

To keep overhead low eviction is done very simply. It checks to see
which bucket the new entry would be added. If the bucket's pos value
is non-zero (meaning there's at least one entry in the bucket) it
replaces the first entry in the bucket. If pos is zero, then it continues
down the normal add process.

This property is useful if you have a set for 'ban' lists where it may
not matter if you release some entries from the set early.
Signed-off-by: NJosh Hunt <johunt@akamai.com>
Signed-off-by: NJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
      07cf8f5a
  7. 01 10月, 2013 7 次提交
  9. 17 9月, 2013 1 次提交
    • J
      netfilter: ipset: Consistent userspace testing with nomatch flag · 0f1799ba
      由 Jozsef Kadlecsik 提交于 
      The "nomatch" commandline flag should invert the matching at testing,
similarly to the --return-nomatch flag of the "set" match of iptables.
Until now it worked with the elements with "nomatch" flag only. From
now on it works with elements without the flag too, i.e:

 # ipset n test hash:net
 # ipset a test 10.0.0.0/24 nomatch
 # ipset t test 10.0.0.1
 10.0.0.1 is NOT in set test.
 # ipset t test 10.0.0.1 nomatch
 10.0.0.1 is in set test.

 # ipset a test 192.168.0.0/24
 # ipset t test 192.168.0.1
 192.168.0.1 is in set test.
 # ipset t test 192.168.0.1 nomatch
 192.168.0.1 is NOT in set test.

 Before the patch the results were

 ...
 # ipset t test 192.168.0.1
 192.168.0.1 is in set test.
 # ipset t test 192.168.0.1 nomatch
 192.168.0.1 is in set test.
Signed-off-by: NJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
      0f1799ba
  11. 30 4月, 2013 4 次提交
  13. 10 4月, 2013 1 次提交
  15. 30 1月, 2013 1 次提交
  17. 22 11月, 2012 1 次提交
  19. 19 11月, 2012 1 次提交
    • J
      netfilter: ipset: Fix range bug in hash:ip,port,net · 17b14ca2
      由 Jozsef Kadlecsik 提交于 
      Due to the missing ininitalization at adding/deleting entries, when
a plain_ip,port,net element was the object, multiple elements were
added/deleted instead. The bug came from the missing dangling
default initialization.

The error-prone default initialization is corrected in all hash:* types.
      17b14ca2
  21. 23 9月, 2012 2 次提交
  23. 22 9月, 2012 2 次提交
  25. 17 5月, 2012 1 次提交
  27. 02 4月, 2012 1 次提交
  29. 08 3月, 2012 2 次提交
  31. 22 11月, 2011 1 次提交
  33. 21 7月, 2011 1 次提交
  35. 17 6月, 2011 8 次提交
  37. 06 6月, 2011 1 次提交