[Bug 1918936] Re: ipset does NSS lookups even if ports are numeric

Haw Loeung 1918936 at bugs.launchpad.net
Fri Jun 25 06:03:32 UTC 2021


Per discussion on Mattermost, the original behavior was to try
string_to_u16() before parse_portname(). This was switched in upstream
commit
https://git.netfilter.org/ipset/tree/lib/parse.c?id=516600858cb54906fb728d04e5edf1131ee7b3b2
and released with ipset v6.37.

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1918936

Title:
  ipset does NSS lookups even if ports are numeric

Status in ipset package in Ubuntu:
  Confirmed
Status in ipset source package in Bionic:
  Invalid
Status in ipset source package in Focal:
  New
Status in ipset source package in Groovy:
  New
Status in ipset source package in Hirsute:
  New

Bug description:
  Hi,

  Do you think we could get
  https://git.netfilter.org/ipset/commit/?id=dbeb20a667e82e4efb8b26b24a0ec641dab5c857
  SRUed to 20.04 ?

  This divides our ipset loading time by ~2 (from ~60s to ~25s).

  Thanks

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ipset/+bug/1918936/+subscriptions



More information about the Ubuntu-openstack-bugs mailing list