Re: [libvirt] [PATCH V3] nwfilter: Add support for ipset

2012-05-14 Thread Stefan Berger
Does anyone have time to look at this one? Stefan On 04/23/2012 08:00 AM, Stefan Berger wrote: This patch adds support for the recent ipset iptables extension to libvirt's nwfilter subsystem. Ipset allows to maintain 'sets' of IP addresses, ports and other packet parameters and allows for

Re: [libvirt] [PATCH V3] nwfilter: Add support for ipset

2012-05-14 Thread Eric Blake
On 04/23/2012 06:00 AM, Stefan Berger wrote: This patch adds support for the recent ipset iptables extension to libvirt's nwfilter subsystem. Ipset allows to maintain 'sets' of IP addresses, ports and other packet parameters and allows for faster lookup (in the order of O(1) vs. O(n)) and rule

Re: [libvirt] [PATCH V3] nwfilter: Add support for ipset

2012-05-14 Thread Stefan Berger
On 05/14/2012 06:20 PM, Eric Blake wrote: On 04/23/2012 06:00 AM, Stefan Berger wrote: This patch adds support for the recent ipset iptables extension to libvirt's nwfilter subsystem. Ipset allows to maintain 'sets' of IP addresses, ports and other packet parameters and allows for faster lookup

[libvirt] [PATCH V3] nwfilter: Add support for ipset

2012-04-23 Thread Stefan Berger
This patch adds support for the recent ipset iptables extension to libvirt's nwfilter subsystem. Ipset allows to maintain 'sets' of IP addresses, ports and other packet parameters and allows for faster lookup (in the order of O(1) vs. O(n)) and rule evaluation to achieve higher throughput than