From: Elise Lennion <elise.lennion@gmail.com>
To: pablo@netfilter.org
Cc: netfilter-devel@vger.kernel.org
Subject: [PATCH nft] doc: Document sets
Date: Thu, 9 Feb 2017 15:35:25 -0200 [thread overview]
Message-ID: <20170209173525.GA10010@lennorien.com> (raw)
This patch adds the missing documentation for sets.
Signed-off-by: Elise Lennion <elise.lennion@gmail.com>
---
doc/nft.xml | 124 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 124 insertions(+)
diff --git a/doc/nft.xml b/doc/nft.xml
index ac31c3b..be729a8 100644
--- a/doc/nft.xml
+++ b/doc/nft.xml
@@ -668,6 +668,130 @@ filter input iif $int_ifs accept
</refsect1>
<refsect1>
+ <title>Sets</title>
+ <para>
+ <cmdsynopsis>
+ <arg choice="req">add</arg>
+ <command> set</command>
+ <arg choice="opt"><replaceable>family</replaceable></arg>
+ <arg choice="req"><replaceable>table</replaceable></arg>
+ <arg choice="req"><replaceable>set</replaceable></arg>
+ {
+ <arg choice="req"><replaceable>type</replaceable></arg>
+ <arg choice="opt"><replaceable>flags</replaceable></arg>
+ <arg choice="opt"><replaceable>timeout</replaceable></arg>
+ <arg choice="opt"><replaceable>gc-interval</replaceable></arg>
+ <arg choice="opt"><replaceable>elements</replaceable></arg>
+ <arg choice="opt"><replaceable>size</replaceable></arg>
+ <arg choice="opt"><replaceable>policy</replaceable></arg>
+ }
+ </cmdsynopsis>
+ <cmdsynopsis>
+ <group choice="req">
+ <arg>delete</arg>
+ <arg>list</arg>
+ <arg>flush</arg>
+ </group>
+ <command> set</command>
+ <arg choice="opt"><replaceable>family</replaceable></arg>
+ <arg choice="req"><replaceable>table</replaceable></arg>
+ <arg choice="req"><replaceable>set</replaceable></arg>
+ </cmdsynopsis>
+ </para>
+ <para>
+ Sets are elements containers of an user-defined data type, they are uniquely identified by an user-defined name and attached to tables.
+ </para>
+
+ <variablelist>
+ <varlistentry>
+ <term><option>add</option></term>
+ <listitem>
+ <para>
+ Add a new set in the specified table.
+ </para>
+ </listitem>
+ </varlistentry>
+ <varlistentry>
+ <term><option>delete</option></term>
+ <listitem>
+ <para>
+ Delete the specified set.
+ </para>
+ </listitem>
+ </varlistentry>
+ <varlistentry>
+ <term><option>list</option></term>
+ <listitem>
+ <para>
+ Display the elements in the specified set.
+ </para>
+ </listitem>
+ </varlistentry>
+ <varlistentry>
+ <term><option>flush</option></term>
+ <listitem>
+ <para>
+ Remove all elements from the specified set.
+ </para>
+ </listitem>
+ </varlistentry>
+ </variablelist>
+
+ <table frame="all">
+ <title>Set specifications</title>
+ <tgroup cols='3' align='left' colsep='1' rowsep='1'>
+ <colspec colname='c1'/>
+ <colspec colname='c2'/>
+ <colspec colname='c3'/>
+ <thead>
+ <row>
+ <entry>Keyword</entry>
+ <entry>Description</entry>
+ <entry>Type</entry>
+ </row>
+ </thead>
+ <tbody>
+ <row>
+ <entry>type</entry>
+ <entry>data type of set elements</entry>
+ <entry>string: ipv4_addr, ipv6_addr, ether_addr, inet_proto, inet_service, mark</entry>
+ </row>
+ <row>
+ <entry>flags</entry>
+ <entry>set flags</entry>
+ <entry>string: constant, interval, timeout</entry>
+ </row>
+ <row>
+ <entry>timeout</entry>
+ <entry>time an element stays in the set</entry>
+ <entry>string, decimal followed by unit. Units are: d, h, m, s</entry>
+ </row>
+ <row>
+ <entry>gc-interval</entry>
+ <entry>garbage collection interval, only available when timeout or flag timeout are active</entry>
+ <entry>string, decimal followed by unit. Units are: d, h, m, s</entry>
+ </row>
+ <row>
+ <entry>elements</entry>
+ <entry>elements contained by the set</entry>
+ <entry>set data type</entry>
+ </row>
+ <row>
+ <entry>size</entry>
+ <entry>maximun number of elements in the set</entry>
+ <entry>unsigned integer (64 bit)</entry>
+ </row>
+ <row>
+ <entry>policy</entry>
+ <entry>set policy</entry>
+ <entry>string: performance, memory</entry>
+ </row>
+ </tbody>
+ </tgroup>
+ </table>
+ </refsect1>
+
+ <refsect1>
<title>Stateful objects</title>
<para>
<cmdsynopsis>
--
2.7.4
next reply other threads:[~2017-02-09 17:35 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-02-09 17:35 Elise Lennion [this message]
2017-02-12 13:55 ` [PATCH nft] doc: Document sets Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20170209173525.GA10010@lennorien.com \
--to=elise.lennion@gmail.com \
--cc=netfilter-devel@vger.kernel.org \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).