[Bug 1918936] Re: ipset does NSS lookups even if ports are numeric

Haw Loeung 1918936 at bugs.launchpad.net
Sat Mar 13 00:26:27 UTC 2021


Example entries in ipset used for testing:

| add test 10.1.1.0/21,80,150.222.129.122/31
| add test 10.1.1.0/21,80,150.222.129.124/31
| add test 10.1.1.0/21,80,150.222.129.126/31

We're not specifying the protocol to avoid the just as expensive
getprotobyname() lookup.

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to ipset in Ubuntu.
https://bugs.launchpad.net/bugs/1918936

Title:
  ipset does NSS lookups even if ports are numeric

Status in ipset package in Ubuntu:
  Confirmed

Bug description:
  Hi,

  Do you think we could get
  https://git.netfilter.org/ipset/commit/?id=dbeb20a667e82e4efb8b26b24a0ec641dab5c857
  SRUed to 20.04 ?

  This divides our ipset loading time by ~2 (from ~60s to ~25s).

  Thanks

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ipset/+bug/1918936/+subscriptions



More information about the Ubuntu-openstack-bugs mailing list