summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorzsdc <taras@vyos.io>2022-09-12 18:07:01 +0300
committerzsdc <taras@vyos.io>2022-09-19 20:16:12 +0300
commitd55b9e14c14011577354b69cc569d2652d5e31fd (patch)
tree76c0e49c9149586f29630a457bf4854a26507d3e /NEWS
parent6de742432786b4035842d3e3f2e4a10df68199f2 (diff)
downloadvyatta-cfg-firewall-d55b9e14c14011577354b69cc569d2652d5e31fd.tar.gz
vyatta-cfg-firewall-d55b9e14c14011577354b69cc569d2652d5e31fd.zip
ipset: T2189: optimized firewall groups performance
This commit optimizes the speed of interaction with the ipset. * removed extra `sudo` from `ipset` commands, because scripts that run `ipset` commands already run under `sudo`. This gives approximately 4x performance improvement. * replaced logic in the `member_exists` function for port groups. Instead of calling `ipset -T` for each port now the whole list is received in one command and a search process is done inside Perl. This significantly improves speed for port groups with long port ranges inside. * delete ip address and port ranges using a single command instead deleting each element individually. * added the same ranges validation for address-group as for port-group.
Diffstat (limited to 'NEWS')
0 files changed, 0 insertions, 0 deletions