* Handling large amounts of data
@ 2005-05-15 21:46 Silimite
2005-05-15 22:15 ` Tobias DiPasquale
0 siblings, 1 reply; 3+ messages in thread
From: Silimite @ 2005-05-15 21:46 UTC (permalink / raw)
To: netfilter-devel
I have written an iptables module called "multirange" that works like
a combination of iprange and multiport. That is, you can specify
multiple ranges to be matched by one rule.
I had to do this because I am loading some 100000 entries into this
rule and I needed something efficient at handling this many ranges.
My question is, what is the best way to communicate all these ranges
from user-space into the kernel module? I am currently loading them
via procfs. Is this an acceptable method or should I be looking at
something else? It certainly works great but I would like it to be as
"proper" as possible.
Thanks!
s
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Handling large amounts of data
2005-05-15 21:46 Handling large amounts of data Silimite
@ 2005-05-15 22:15 ` Tobias DiPasquale
2005-05-16 14:39 ` Silimite
0 siblings, 1 reply; 3+ messages in thread
From: Tobias DiPasquale @ 2005-05-15 22:15 UTC (permalink / raw)
To: Silimite; +Cc: netfilter-devel
On 5/15/05, Silimite <silimite@gmail.com> wrote:
> My question is, what is the best way to communicate all these ranges
> from user-space into the kernel module? I am currently loading them
> via procfs. Is this an acceptable method or should I be looking at
> something else? It certainly works great but I would like it to be as
> "proper" as possible.
A unicast netlink socket would almost certainly be the best way to go
here. For examples on how to use unicast netlink sockets, look at
net/ipv4/netfilter/ip_queue.c or net/core/rtnetlink.c.
--
[ Tobias DiPasquale ]
0x636f6465736c696e67657240676d61696c2e636f6d
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Handling large amounts of data
2005-05-15 22:15 ` Tobias DiPasquale
@ 2005-05-16 14:39 ` Silimite
0 siblings, 0 replies; 3+ messages in thread
From: Silimite @ 2005-05-16 14:39 UTC (permalink / raw)
To: Tobias DiPasquale; +Cc: netfilter-devel
Thanks! I'll look into that more. I had looked at the netlink
sockets in the past but they seemed to require a more complex
interface (ie. I can't just cat/echo commands like in procfs). I do
like the idea of being able to use netlink and have persistent
connections open (for status updates like in a GUI interface).
I suppose there are not a lot of modules that need this type of
interface. I noticed that there was at least one other module using
procfs.
s
On 5/15/05, Tobias DiPasquale <codeslinger@gmail.com> wrote:
> A unicast netlink socket would almost certainly be the best way to go
> here. For examples on how to use unicast netlink sockets, look at
> net/ipv4/netfilter/ip_queue.c or net/core/rtnetlink.c.
>
> --
> [ Tobias DiPasquale ]
> 0x636f6465736c696e67657240676d61696c2e636f6d
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2005-05-16 14:39 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-05-15 21:46 Handling large amounts of data Silimite
2005-05-15 22:15 ` Tobias DiPasquale
2005-05-16 14:39 ` Silimite
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.