Red Hat Summit Red Hat Summit지원콘솔개발자평가판 시작연락처

이 콘텐츠는 선택한 언어로 제공되지 않습니다.

2.8.9.5.2. ipset Commands

The format of the ipset command is as follows: 
ipset [options] command [command-options][options] command [command-options][options] command [command-options][options] command [command-options][options] command [command-options]
Copy to Clipboard Toggle word wrap
Where command is one of: 
create | add | del | test | destroy | list | save | restore | flush | rename | swap | help | version | -
Copy to Clipboard Toggle word wrap
Allowed options are: 
-exist | -output [ plain | save | xml ] | -quiet | -resolve | -sorted | -name | -terse
Copy to Clipboard Toggle word wrap
The create command is used to create a new data structure to store a set of IP data. The add command adds new data to the set, the data added is referred to as an element of the set.
The -exist option suppresses error message if the element already exists, and it has a special role in updating a time out value. To change a time out, use the ipset add command and specify all the data for the element again, changing only the time out value as required, and using the -exist option.
The test option is for testing if the element already exists within a set.
The format of the create command is as follows: 
ipset create set-name type-name [create-options]set-name type-name [create-options]set-name type-name [create-options]
Copy to Clipboard Toggle word wrap
The set-name is a suitable name chosen by the user, the type-name is the name of the data structure used to store the data comprising the set. The format of the type-name is as follows: 
method:datatype[,datatype[,datatype],datatype[,datatype],datatype[,datatype]]
Copy to Clipboard Toggle word wrap
The allowed methods for storing data are: 
 bitmap | hash | list
Copy to Clipboard Toggle word wrap
The allowed data types are: 
ip | net | mac | port | iface
Copy to Clipboard Toggle word wrap
When adding, deleting, or testing entries in a set, the same comma separated data syntax must be used for the data that makes up one entry, or element, in the set. For example: 
ipset add set-name ipaddr,portnum,ipaddr
Copy to Clipboard Toggle word wrap

Note

A set cannot contain IPv4 and IPv6 addresses at the same time. When a set is created it is bound to a family, inet for IPv4 or inet6 for IPv6, and the default is inet.

Example 2.3. Create an IP Set

To create an IP set consisting of a source IP address, a port, and destination IP address, issue a command as follows: 
~]# ipset create my-set hash:ip,port,ip
Copy to Clipboard Toggle word wrap
Once the set is created, entries can be added as follows: 
~]# ipset add my-set 192.168.1.2,80,192.168.2.2
~]# ipset add my-set 192.168.1.2,443,192.168.2.2
Copy to Clipboard Toggle word wrap
The set types have the following optional parameters in common. They must be specified when the set is created in order for them to be used:
  • timeout — The value given with the create command will be the default value for the set created. If a value is given with the add command, it will be the initial non-default value for the element.

Example 2.4. List an IP Set

To list the contents of a specific IP Set, my-set, issue a command as follows: 
~]# ipset list my-set
Name: my-set
Type: hash:ip,port,ip
Header: family inet hashsize 1024 maxelem 65536 
Size in memory: 8360
References: 0
Members:
192.168.1.2,tcp:80,192.168.2.2
192.168.1.2,tcp:443,192.168.2.2
Copy to Clipboard Toggle word wrap
Omit the set name to list all sets.

Example 2.5. Test the Elements of an IP Set

Listing the contents of large sets is time consuming. You can test for the existence of an element as follows: 
~]# ipset test my-set 192.168.1.2,80,192.168.2.2
192.168.1.2,tcp:80,192.168.2.2 is in set my-set.
Copy to Clipboard Toggle word wrap
맨 위로 이동
Red Hat logoGithubredditYoutubeTwitter

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 문서 정보

Red Hat을 사용하는 고객은 신뢰할 수 있는 콘텐츠가 포함된 제품과 서비스를 통해 혁신하고 목표를 달성할 수 있습니다. 최신 업데이트를 확인하세요.

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat은 코드, 문서, 웹 속성에서 문제가 있는 언어를 교체하기 위해 최선을 다하고 있습니다. 자세한 내용은 다음을 참조하세요.Red Hat 블로그.

Red Hat 소개

Red Hat은 기업이 핵심 데이터 센터에서 네트워크 에지에 이르기까지 플랫폼과 환경 전반에서 더 쉽게 작업할 수 있도록 강화된 솔루션을 제공합니다.

Theme

© 2025 Red Hat