Re: [PATCH nf] netfilter: ipset: remove need to allocate memory on delete operations

Jozsef Kadlecsik <[email protected]> Mon, 10 Aug 2026 17:10:52 +0200 (CEST)

Newsgroups	gmane.comp.security.firewalls.netfilter.devel
Message-ID	<[email protected]>

Hi Florian,

On Sun, 9 Aug 2026, Florian Westphal wrote:

>> 2**24 is a lot but still a reachable limit.
>
> Hmm. 16m entries...  I guess its possible for very small prefix
> lengths?  We could use BITS_PER_LONG == 64 but it gets more ugly then.

I was thinking on IPv6 where it's more possible. But hash:ip has no such 
limitation with same-size prefixes so there are other solutions to store 
large number of same-size prefixes.

Best regards,
Jozsef