diff options
| author | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | 2011-02-01 15:51:00 +0100 |
|---|---|---|
| committer | Patrick McHardy <kaber@trash.net> | 2011-02-01 15:51:00 +0100 |
| commit | 41d22f7b2e48c77175b62cec3797d7d7173a626e (patch) | |
| tree | b6760c287a3cc864fc16ed45b611bead7dc7523f /net/netfilter/ipset/Kconfig | |
| parent | 5663bc30e6114b6ba88cc428619ede46a3246a7b (diff) | |
netfilter: ipset: hash:ip,port,net set type support
The module implements the hash:ip,port,net type support in four flavours:
for IPv4 and IPv6, both without and with timeout support. The elements
are three dimensional: IPv4/IPv6 address, protocol/port and IPv4/IPv6
network address/prefix triples. The different prefixes are searched/matched
from the longest prefix to the shortes one (most specific to least).
In other words the processing time linearly grows with the number of
different prefixes in the set.
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'net/netfilter/ipset/Kconfig')
| -rw-r--r-- | net/netfilter/ipset/Kconfig | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/net/netfilter/ipset/Kconfig b/net/netfilter/ipset/Kconfig index e6935533425..e2fbaa9d902 100644 --- a/net/netfilter/ipset/Kconfig +++ b/net/netfilter/ipset/Kconfig @@ -79,4 +79,14 @@ config IP_SET_HASH_IPPORTIP To compile it as a module, choose M here. If unsure, say N. +config IP_SET_HASH_IPPORTNET + tristate "hash:ip,port,net set support" + depends on IP_SET + help + This option adds the hash:ip,port,net set type support, by which + one can store IPv4/IPv6 address, protocol/port, and IPv4/IPv6 + network address/prefix triples in a set. + + To compile it as a module, choose M here. If unsure, say N. + endif # IP_SET |