DNS是否可以增加对ipset的读取

[om2mo]

内存读取效率高，iptables也是使用ipset，这样免去了维护ACL和ipset两份列表的麻烦

[zonyitoo]

1. ACL also stores all IP networks in a data structure in memory. So there would be no significant performance difference between ACL and ipset.
2. Does ipset have C APIs? Maybe no. The only libipset doesn't seem to provide an API for testing whether an IP was in an existed ipset.

[LuoZijun]

我打赌这个没有 iana-ip-db 里面的 acl 快。

[metercai]

2. Does ipset have C APIs? Maybe no. The only libipset doesn't seem to provide an API for testing whether an IP was in an existed ipset.

ipset test SETNAME TEST-ENTRY [ TEST-OPTIONS ]