>> No, it's for the userspace tool. The set types can be compiled as dynamic >> modules (shared libraries), instead of statically compiling into the >> "ipset" binary. >> > Got it! I always assumed that the userspace modules got compiled as .so > files, so I must have been looking into the future ;-) . I also assume > that I may configure which modules to include and which to leave out, > right (otherwise I don't see the point of this feature)? the point of this feature is providing the easy way that the third-party or the experimental modules plug into the existing ipset userspace binary without recompile. You could build the experimental ipset "FOO" kernel module and build the shared-lib of "FOO" userspace tool module and plug into the system without recompile the ipset userspace tool at all. It's inspired by iptables (kernel/userspace module). -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
