All of lore.kernel.org
 help / color / mirror / Atom feed
* Handling large amounts of data
@ 2005-05-15 21:46 Silimite
  2005-05-15 22:15 ` Tobias DiPasquale
  0 siblings, 1 reply; 3+ messages in thread
From: Silimite @ 2005-05-15 21:46 UTC (permalink / raw)
  To: netfilter-devel

I have written an iptables module called "multirange" that works like
a combination of iprange and multiport.  That is, you can specify
multiple ranges to be matched by one rule.

I had to do this because I am loading some 100000 entries into this
rule and I needed something efficient at handling this many ranges.

My question is, what is the best way to communicate all these ranges
from user-space into the kernel module?   I am currently loading them
via procfs.  Is this an acceptable method or should I be looking at
something else?  It certainly works great but I would like it to be as
"proper" as possible.

Thanks!

s

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Handling large amounts of data
  2005-05-15 21:46 Handling large amounts of data Silimite
@ 2005-05-15 22:15 ` Tobias DiPasquale
  2005-05-16 14:39   ` Silimite
  0 siblings, 1 reply; 3+ messages in thread
From: Tobias DiPasquale @ 2005-05-15 22:15 UTC (permalink / raw)
  To: Silimite; +Cc: netfilter-devel

On 5/15/05, Silimite <silimite@gmail.com> wrote: 
> My question is, what is the best way to communicate all these ranges
> from user-space into the kernel module?   I am currently loading them
> via procfs.  Is this an acceptable method or should I be looking at
> something else?  It certainly works great but I would like it to be as
> "proper" as possible.

A unicast netlink socket would almost certainly be the best way to go
here. For examples on how to use unicast netlink sockets, look at
net/ipv4/netfilter/ip_queue.c or net/core/rtnetlink.c.

-- 
[ Tobias DiPasquale ]
0x636f6465736c696e67657240676d61696c2e636f6d

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Handling large amounts of data
  2005-05-15 22:15 ` Tobias DiPasquale
@ 2005-05-16 14:39   ` Silimite
  0 siblings, 0 replies; 3+ messages in thread
From: Silimite @ 2005-05-16 14:39 UTC (permalink / raw)
  To: Tobias DiPasquale; +Cc: netfilter-devel

Thanks!  I'll look into that more.  I had looked at the netlink
sockets in the past but they seemed to require a more complex
interface (ie. I can't just cat/echo commands like in procfs).  I do
like the idea of being able to use netlink and have persistent
connections open (for status updates like in a GUI interface).

I suppose there are not a lot of modules that need this type of
interface.   I noticed that there was at least one other module using
procfs.

s

On 5/15/05, Tobias DiPasquale <codeslinger@gmail.com> wrote:
>  A unicast netlink socket would almost certainly be the best way to go
> here. For examples on how to use unicast netlink sockets, look at
> net/ipv4/netfilter/ip_queue.c or net/core/rtnetlink.c.
> 
> --
> [ Tobias DiPasquale ]
> 0x636f6465736c696e67657240676d61696c2e636f6d

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2005-05-16 14:39 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-05-15 21:46 Handling large amounts of data Silimite
2005-05-15 22:15 ` Tobias DiPasquale
2005-05-16 14:39   ` Silimite

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.