similar to: [Bug 1584] nft large sets load high memory requirements

https://bugzilla.netfilter.org/show_bug.cgi?id=1584 Pablo Neira Ayuso <pablo at netfilter.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #8 from Pablo Neira Ayuso <pablo at netfilter.org> --- Meanwhile kernel got a

https://bugzilla.netfilter.org/show_bug.cgi?id=1584 --- Comment #9 from Pablo Neira Ayuso <pablo at netfilter.org> --- more improvements in userspace: 20f1c60ac8c8 src: collapse set element commands from parser 193faa5475a5 json: collapse set element commands from parser depending on ruleset pattern. Kernel patches also got merge to reduce memory consumption: commit

https://bugzilla.netfilter.org/show_bug.cgi?id=1735 Bug ID: 1735 Summary: Adding nftables interval sets progressively gets slower and makes the nft CLI less responsive with each added set Product: nftables Version: 1.0.x Hardware: All OS: All Status: NEW Severity:

https://bugzilla.netfilter.org/show_bug.cgi?id=1461 kfm at plushkava.net changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1735 Referenced Bugs: https://bugzilla.netfilter.org/show_bug.cgi?id=1735 [Bug 1735] Adding nftables interval sets progressively

https://bugzilla.netfilter.org/show_bug.cgi?id=1393 Bug ID: 1393 Summary: iptables-nft -S hangs if not run as root Product: nftables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee: pablo at

https://bugzilla.netfilter.org/show_bug.cgi?id=1454 Bug ID: 1454 Summary: nft list set omits timeout values for intervals formatted as hyphenated ranges Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: normal Priority: P5

https://bugzilla.netfilter.org/show_bug.cgi?id=1406 Bug ID: 1406 Summary: nft dies with an assertion of consumed > 0 Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1391 Bug ID: 1391 Summary: iptables-nft-restore --test can segfault Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee: pablo at

https://bugzilla.netfilter.org/show_bug.cgi?id=1403 Bug ID: 1403 Summary: Timeout object with invalid time unit crashes nft Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1706 Bug ID: 1706 Summary: Nft is slow when loading ruleset with lots of add element calls of different interval maps Product: nftables Version: 1.0.x Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority:

https://bugzilla.netfilter.org/show_bug.cgi?id=1461 Bug ID: 1461 Summary: [TRACKER] Issues concerning sets, maps and meters Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1645 kfm at plushkava.net changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1461 CC| |kfm at plushkava.net Referenced Bugs:

https://bugzilla.netfilter.org/show_bug.cgi?id=1663 kfm at plushkava.net changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kfm at plushkava.net -- You are receiving this mail because: You are watching all bug changes. -------------- next part

https://bugzilla.netfilter.org/show_bug.cgi?id=1392 Bug ID: 1392 Summary: nft stalls on EGAIN upon repeatedly flushing and populating a set Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: normal Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=1438 Bug ID: 1438 Summary: nft generates wrong intervals for sets with auto-merge Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: major Priority: P5 Component: nft Assignee: pablo

https://bugzilla.netfilter.org/show_bug.cgi?id=1731 Bug ID: 1731 Summary: Set containing invalid type incurs reproducible segfault Product: nftables Version: 1.0.x Hardware: x86_64 OS: All Status: NEW Severity: normal Priority: P5 Component: nft Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=1388 Bug ID: 1388 Summary: Combining --terse with --json has no effect Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1710 Bug ID: 1710 Summary: When called from nft -f, list counters outputs all zeros Product: nftables Version: 1.0.x Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: major Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=1461 kfm at plushkava.net changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |1645 Referenced Bugs: https://bugzilla.netfilter.org/show_bug.cgi?id=1645 [Bug 1645] feature request: adding permanent set elements

https://bugzilla.netfilter.org/show_bug.cgi?id=1464 Bug ID: 1464 Summary: Trying to populate a set raises a netlink error "Could not process rule: No space left on device" Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: normal