• Pablo Neira Ayuso's avatar
    netfilter: nf_tables: add bitmap set type · 665153ff
    Pablo Neira Ayuso authored
    This patch adds a new bitmap set type. This bitmap uses two bits to
    represent one element. These two bits determine the element state in the
    current and the future generation that fits into the nf_tables commit
    protocol. When dumping elements back to userspace, the two bits are
    expanded into a struct nft_set_ext object.
    
    If no NFTA_SET_DESC_SIZE is specified, the existing automatic set
    backend selection prefers bitmap over hash in case of keys whose size is
    <= 16 bit. If the set size is know, the bitmap set type is selected if
    with 16 bit kets and more than 390 elements in the set, otherwise the
    hash table set implementation is used.
    
    For 8 bit keys, the bitmap consumes 66 bytes. For 16 bit keys, the
    bitmap takes 16388 bytes.
    Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
    665153ff
Makefile 8.27 KB