wok diff ipset/description.txt @ rev 25705

fusecloop/extract_compressed_fs: can convert to v0.68 or v1.0
author Pascal Bellard <pascal.bellard@slitaz.org>
date Sat Jun 22 12:48:49 2024 +0000 (4 months ago)
parents
children
line diff
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/ipset/description.txt	Sat Jun 22 12:48:49 2024 +0000
     1.3 @@ -0,0 +1,16 @@
     1.4 +IP sets are a framework inside the Linux kernel, which can be administered
     1.5 +by the ipset utility. Depending on the type, an IP set may store IP addresses,
     1.6 +networks, (TCP/UDP) port numbers, MAC addresses, interface names or
     1.7 +combinations of them in a way, which ensures lightning speed when matching
     1.8 +an entry against a set.
     1.9 +
    1.10 +If you want to
    1.11 +
    1.12 +* store multiple IP addresses or port numbers and match against the
    1.13 +  collection by iptables at one swoop;
    1.14 +* dynamically update iptables rules against IP addresses or ports without
    1.15 +  performance penalty;
    1.16 +* express complex IP address and ports based rulesets with one single
    1.17 +  iptables rule and benefit from the speed of IP sets 
    1.18 +
    1.19 +then ipset may be the proper tool for you.