[Bug 1918936] Re: ipset does NSS lookups even if ports are numeric
Haw Loeung
1918936 at bugs.launchpad.net
Sat Mar 13 00:26:27 UTC 2021
Example entries in ipset used for testing:
| add test 10.1.1.0/21,80,150.222.129.122/31
| add test 10.1.1.0/21,80,150.222.129.124/31
| add test 10.1.1.0/21,80,150.222.129.126/31
We're not specifying the protocol to avoid the just as expensive
getprotobyname() lookup.
--
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to ipset in Ubuntu.
https://bugs.launchpad.net/bugs/1918936
Title:
ipset does NSS lookups even if ports are numeric
Status in ipset package in Ubuntu:
Confirmed
Bug description:
Hi,
Do you think we could get
https://git.netfilter.org/ipset/commit/?id=dbeb20a667e82e4efb8b26b24a0ec641dab5c857
SRUed to 20.04 ?
This divides our ipset loading time by ~2 (from ~60s to ~25s).
Thanks
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ipset/+bug/1918936/+subscriptions
More information about the Ubuntu-openstack-bugs
mailing list