Skip to content
  • Jozsef Kadlecsik's avatar
    netfilter: ipset: Introduction of new commands and protocol version 7 · 23c42a40
    Jozsef Kadlecsik authored
    
    
    Two new commands (IPSET_CMD_GET_BYNAME, IPSET_CMD_GET_BYINDEX) are
    introduced. The new commands makes possible to eliminate the getsockopt
    operation (in iptables set/SET match/target) and thus use only netlink
    communication between userspace and kernel for ipset. With the new
    protocol version, userspace can exactly know which functionality is
    supported by the running kernel.
    
    Both the kernel and userspace is fully backward compatible.
    
    Signed-off-by: default avatarJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
    23c42a40