linux/net/netfilter/ipset
Josh Hunt 07cf8f5ae2 netfilter: ipset: add forceadd kernel support for hash set types
Adds a new property for hash set types, where if a set is created
with the 'forceadd' option and the set becomes full the next addition
to the set may succeed and evict a random entry from the set.

To keep overhead low eviction is done very simply. It checks to see
which bucket the new entry would be added. If the bucket's pos value
is non-zero (meaning there's at least one entry in the bucket) it
replaces the first entry in the bucket. If pos is zero, then it continues
down the normal add process.

This property is useful if you have a set for 'ban' lists where it may
not matter if you release some entries from the set early.

Signed-off-by: Josh Hunt <johunt@akamai.com>
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
2014-03-06 09:31:43 +01:00
..
ip_set_bitmap_gen.h netfilter: ipset: Use netlink callback dump args only 2013-10-22 10:13:59 +02:00
ip_set_bitmap_ip.c netfiler: ipset: Add net namespace for ipset 2013-09-30 21:42:52 +02:00
ip_set_bitmap_ipmac.c netfiler: ipset: Add net namespace for ipset 2013-09-30 21:42:52 +02:00
ip_set_bitmap_port.c netfilter:ipset: Fix memory allocation for bitmap:port 2013-10-27 19:24:39 +01:00
ip_set_core.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_getport.c netfilter: ipset: Support package fragments for IPv4 protos without ports 2013-09-30 21:33:26 +02:00
ip_set_hash_gen.h netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_ip.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_ipmark.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_ipport.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_ipportip.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_ipportnet.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_net.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_netiface.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_netnet.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_netport.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_hash_netportnet.c netfilter: ipset: add forceadd kernel support for hash set types 2014-03-06 09:31:43 +01:00
ip_set_list_set.c netfilter: ipset: Use netlink callback dump args only 2013-10-22 10:13:59 +02:00
Kconfig netfilter: ipset: add hash:ip,mark data type to ipset 2014-03-06 09:31:42 +01:00
Makefile netfilter: ipset: add hash:ip,mark data type to ipset 2014-03-06 09:31:42 +01:00
pfxlen.c net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules 2011-10-31 19:30:30 -04:00