IPSET v6 - Developer info

[john9527]

Just a quick heads up for anyone writing scripts to use dnsmasq/ipset. I just finished porting ipset v6.29 (current version in Merlin is v4.5) to the ARM based routers on my fork. Note v6 can't be ported to the MIPS routers due to the kernel level. A couple of things I've found....

• The command syntax has changed slightly, although it appears to still be backward compatible with the old syntax
• All the module names have changed
• At least one command response string has changed
• At least one command response has changed from stdout to stderr output

I had to go through my scripts and make them version aware. Still early in the process, so will be a while before I actually think about putting it into a release. Not sure if breaking all the existing scripts is worth it yet (ipset v6 brings IPv6 support).

A final note, I borrowed from Shibby Tomato to do the port...so anyone writing scripts to be compatible with Tomato/ARM will also have to take this into account.

 

[RMerlin]

Not sure if breaking all the existing scripts is worth it yet (ipset v6 brings IPv6 support).

This, and the fact that I would have to support two different versions for the two kernels was why I chose to stick with v4.5, so I could have the same version on allmodels. Otherwise it would be incredibly confusing to have the same firmware have different syntax depending on whether you have a MIPS or an ARM-based router.

Maybe once I decided to ditch support for the MIPS models, I will reconsider upgrading to whatever will be up-to-date at that time.

 

[john9527]

This, and the fact that I would have to support two different versions for the two kernels was why I chose to stick with v4.5, so I could have the same version on allmodels. Otherwise it would be incredibly confusing to have the same firmware have different syntax depending on whether you have a MIPS or an ARM-based router.

Maybe once I decided to ditch support for the MIPS models, I will reconsider upgrading to whatever will be up-to-date at that time.

I followed the 'template' of how the version of iptables is selected at compile time to build in the new ipset. I haven't tried to compile a MIPS version yet to see if I did it right

 

[kvic]

Just a quick heads up for anyone writing scripts to use dnsmasq/ipset. I just finished porting ipset v6.29 (current version in Merlin is v4.5) to the ARM based routers on my fork.

IPv6 is worth support but the world is moving so slow to it.

Would be interesting to see some benchmark on performance. Does it perform faster and more efficient with a large set of ip addresses? It'll be very tempting to upgrade if so.