wok diff ipset/description.txt @ rev 24989

updated nfs-utils (2.4.3 -> 2.6.1)
author Hans-G?nter Theisgen
date Thu May 12 17:03:36 2022 +0100 (2022-05-12)
parents
children
line diff
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/ipset/description.txt	Thu May 12 17:03:36 2022 +0100
     1.3 @@ -0,0 +1,16 @@
     1.4 +IP sets are a framework inside the Linux kernel, which can be administered
     1.5 +by the ipset utility. Depending on the type, an IP set may store IP addresses,
     1.6 +networks, (TCP/UDP) port numbers, MAC addresses, interface names or
     1.7 +combinations of them in a way, which ensures lightning speed when matching
     1.8 +an entry against a set.
     1.9 +
    1.10 +If you want to
    1.11 +
    1.12 +* store multiple IP addresses or port numbers and match against the
    1.13 +  collection by iptables at one swoop;
    1.14 +* dynamically update iptables rules against IP addresses or ports without
    1.15 +  performance penalty;
    1.16 +* express complex IP address and ports based rulesets with one single
    1.17 +  iptables rule and benefit from the speed of IP sets 
    1.18 +
    1.19 +then ipset may be the proper tool for you.