summaryrefslogtreecommitdiffstats
path: root/kernel/ip_set_hash_ipportip.c
Commit message (Collapse)AuthorAgeFilesLines
* Reorganized kernel/ subdirJozsef Kadlecsik2011-02-031-562/+0
| | | | | The kernel/ subdirectory is reorganized to follow the kernel directory structure.
* netfilter: ipset: remove unnecessary includesPatrick McHardy2011-02-011-3/+0
| | | | | | | | | None of the set types need uaccess.h since this is handled centrally in ip_set_core. Most set types additionally don't need bitops.h and spinlock.h since they use neither. tcp.h is only needed by those using before(), udp.h is not needed at all. Signed-off-by: Patrick McHardy <kaber@trash.net>
* Move the type specifici attribute validation to the coreJozsef Kadlecsik2011-01-271-42/+24
| | | | | | The type specific attribute validation can be moved to the ipset core. That way it's done centrally and thus can be eliminated from the individual set types (suggested by Patrick McHardy).
* Use vzalloc() instead of __vmalloc()Jozsef Kadlecsik2011-01-261-2/+1
| | | | Use vzalloc() if kernel version supports it. (Eric Dumazet, Patrick McHardy)
* Fix trailing whitespaces and pr_* messagesJozsef Kadlecsik2011-01-211-1/+1
| | | | | | Some trailing whitespace slipped in, those are removed. With the deleted ip_set_kernel.h, the pr_* messages lost the trailing "\n" character. The messages were completed with it.
* Un-inline functions which are not small enoughJozsef Kadlecsik2011-01-201-26/+4
|
* The get_ip*_port functions are too large to be inlined, moved into the core.Jozsef Kadlecsik2011-01-201-4/+4
|
* Enforce network-order data in the netlink protocolJozsef Kadlecsik2011-01-201-5/+22
| | | | | | Allow only network-order data, with NLA_F_NET_BYTEORDER flag. Sanity checks also added to prevent processing broken messages where mandatory attributes are missing. (Patrick McHardy's review)
* Use annotated types and fix sparse warningsJozsef Kadlecsik2011-01-201-12/+11
| | | | | | Annotated types are introduced and sparse warnings fixed. Two warnings remained in ip_set_core.c but those are false ones. (Patrick McHardy's review)
* NETMASK*, HOSTMASK* macros are too genericJozsef Kadlecsik2011-01-201-2/+2
| | | | | NETMASK*, HOSTMASK* macros are rewritten to small inline functions ip_set_netmask* and ip_set_hostmask* (Patrick McHardy's review)
* Get rid of ip_set_kernel.hJozsef Kadlecsik2011-01-201-1/+0
| | | | | The header file was useful at deep debugging only, we can get rid of now. (Patrick McHardy's review)
* Fix the placement style of boolean operators at continued linesJozsef Kadlecsik2011-01-201-17/+17
| | | | Fix "&&" and "||" continuation style (Patrick McHardy's review)
* Update copyright date and some style changes.Jozsef Kadlecsik2011-01-141-1/+1
|
* Use jhash.h accepted in kernel, with backward compatibility.Jozsef Kadlecsik2011-01-131-1/+1
|
* Separate prefixlens from ip_set core.Jozsef Kadlecsik2011-01-131-0/+1
| | | | | | Separate prefixlens from ip_set core for better readibility and honoring the independence. Also, comment that prefixlens were borrowed from Jan Engelhardt.
* kernel: const annotationsJan Engelhardt2010-12-191-6/+6
|
* kernel: use __read_mostly for registration-type structuresJan Engelhardt2010-12-191-1/+1
| | | | Here is where __read_mostly goes :-)
* kernel: do not mix const and __read_mostlyJan Engelhardt2010-12-191-2/+2
| | | | | It makes no sense to mix these two. Either it is writable-plus-read-mostly, or it is constant.
* Support adding/deleting multiple entries, kernel part.Jozsef Kadlecsik2010-12-171-4/+72
| | | | | | Support adding/deleting multiple entries in the kernel side of the hash:ip,port, hash:ip,port,ip, hash:ip,port,net and hash:net,port types.
* Remove unnecessary gfp_flags argumentsJozsef Kadlecsik2010-12-161-4/+4
| | | | | Where the argument was used, the set lock was already activated, therefore the argument value was always GFP_ATOMIC.
* Convert hash types from chash to ahash.Jozsef Kadlecsik2010-12-101-15/+11
| | | | | | Instead of the cache friendly hashing, use the array based hashing. According to my tests the latter uses less memory, faster at lookup and deletion, and only slower at insertion.
* Strip off ip_set_ prefix from non-ipset specific header files.Jozsef Kadlecsik2010-12-081-1/+1
|
* Create include/linux/netfilter/ipset/ directoryJozsef Kadlecsik2010-12-071-8/+8
| | | | Separate the ipset header files from netfilter header files.
* Remove include/net/pfxlen.hJozsef Kadlecsik2010-12-071-1/+0
| | | | | Spare some memory by moving the static prefixlen maps to the ipset core. Thus we can get rid of include/net/pfxlen.h too.
* Whitespace, checkpatch.pl cleanups.Jozsef Kadlecsik2010-12-071-11/+11
|
* Resizing converted to run under read-locking of the setJozsef Kadlecsik2010-10-301-6/+9
| | | | | | | With restricting resizing so that it can be triggered by an add from userspace only, we can modify it so that it uses read-locking instead of write-locking. Thus the matching in the set can run parallel with resizing.
* Fixes, cleanups, commentsv5.0-pre8Jozsef Kadlecsik2010-10-241-77/+44
| | | | | | | | | | | | | | | | | | | - More comments added to the code - ICMP and ICMPv6 support added to the hash:ip,port, hash:ip,port,ip and hash:ip,port,net types - hash:net and hash:ip,port,net types are reworked - hash:net,port type added - Wrong direction parameters fixed in hash:ip,port - Helps and manpage are updated - More tests added - Ugly macros are rewritten to functions in parse.c (Holger Eitzenberger) - resize related bug in hash types fixed (Holger Eitzenberger) - autoreconf patches by Jan Engelhardt applied - netlink patch minimalized: dumping can be initialized by a second parsing of the message (thanks to David and Patrick for the suggestion) - IPv4/IPv6 address attributes are introduced in order to fix the context (suggested by David)
* Cleanup, compatibilityv5.0-pre7Jozsef Kadlecsik2010-08-231-2/+2
| | | | | | | | | - Use is_vmalloc_addr when freeing vmalloc or kmalloc-ed areas. Thus we can get rid of a flag and simplify some functions. - When checking "same" sets, ignore hash size, because resizing changes it. - 2.6.35 compatibility added. - Discuss backward/forward compatibilities in the README file.
* ipset 5: Sparc related and compatibility fixesv5.0-pre5Jozsef Kadlecsik2010-06-291-3/+3
| | | | | | | | ipset 5 is tested on Sparc, which revealed some compatibility issues and those are fixed. Kernels from 2.6.31 onward are supported. The testsuite checkings are completed to run match/target checks. The README file is updated to reflect the requirements to install and run ipset 5.
* ipset 5: last new feature addedv5.0-pre3Jozsef Kadlecsik2010-06-221-28/+100
| | | | | | | | | | | - the hash types can now store protocol together port, not only port - lots of fixes everywhere: parser, error reporting, manpage The last bits on the todo list before announcing ipset 5: - recheck all the error messages - add possibly more tests - polish manpage
* ipset 5 in an almost ready state - milestonev5.0-pre1Jozsef Kadlecsik2010-06-151-155/+425
| | | | | | | | | | | | Reworked protocol and internal interfaces, missing set types added, backward compatibility verified, lots of tests added (and thanks to the tests, bugs fixed), even the manpage is rewritten ;-). Countless changes everywhere... The missing bits before announcing ipset 5: - net namespace support - new iptables/ip6tables extension library - iptables/ip6tables match and target tests (backward/forward compatibility) - tests on catching syntax errors
* Fifth stage to ipset-5Jozsef Kadlecsik2010-04-221-0/+215
Rename files in kernel/ and get rid of old ones (2.4.x kernel tree support).