Re: [IPSET] help with netlink connector

Re: [IPSET] help with netlink connector

[Carlo Comin]

Jozsef Kadlecsik wrote:

> Instead of netlink, the netfilter specific nfnetlink is the
> proper tool for such a rewriting.

...wait, do you mean nfnetlink instead of the newest connector?

Re: [IPSET] help with netlink connector

[Jozsef Kadlecsik]

On Tue, 1 Nov 2005, Carlo Comin wrote:

> > Instead of netlink, the netfilter specific nfnetlink is the
> > proper tool for such a rewriting.
>
> ...wait, do you mean nfnetlink instead of the newest connector?

As far as I see, both the newest connector and nfnetlink are just
instances of netlink. But because netfilter are going to use nfnetlink,
ipset should use the same.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

[IPSET] help with netlink connector

[vl4d]

I'm trying to rewrite the ipset sockopt interface with netlink connector 
introduced in 2.6.14... anyway i need some help and directions.

As far as i have understood ipset adds SO_ IP_SET option to IP and manage the 
whole stuff through {set|get}sockopt. How can i access this option using 
connector? do i have to register a connector callback at kernel level  using 
a module and send messages from ipset ??

i need disperate help :D

Regards

Re: [IPSET] help with netlink connector

[Jozsef Kadlecsik]

On Sat, 29 Oct 2005 vl4d@spine-group.org wrote:

> I'm trying to rewrite the ipset sockopt interface with netlink connector
> introduced in 2.6.14... anyway i need some help and directions.
>
> As far as i have understood ipset adds SO_ IP_SET option to IP and manage the
> whole stuff through {set|get}sockopt. How can i access this option using
> connector? do i have to register a connector callback at kernel level  using
> a module and send messages from ipset ??

That'd mean a complete rewriting of the kernel-userspace communication in
ipset. You would not want to access the (set|get)sockopt from netlink but
replace it with a netlink communication channel. Instead of netlink, the
netfilter specific nfnetlink is the proper tool for such a rewriting.
(The subject is on the TODO list of ipset.)

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary