On Tue, 25 Nov 2008, Nigel Heron wrote: > Is ipset stable enough to be deployed on live environments? iphash seems > like the best set type for us, how many ips can the set handle before > there's a noticeable slowdown? any feedback would be appreciated. ipset is stable enough for in production usage. The speed of the iphash set is actually constant by nature and independent of the number of actual entries (your network card and bus will slow you down and not iphash). > also, if it helps anyone else .. while trying ipset 2.4.5 i had to add: > #include <stdbool.h> > to "kernel/ip_set_setlist.c" to get it to compile. What is your kernel version? Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
