IPSET-TRANSLATE - Online Linux Manual PageSection : 8
Updated : May 31, 2021

NAMEipset-translate — translation tool to migrate from ipset to nftables

DESCRIPTIONThis tool allows system administrators to translate a given IP sets file to nftables(8). The only available command is: • ipset-translate restore < file.ipt

USAGEThe ipset-translate tool reads an IP sets file in the syntax produced by ipset(8) save. No set modifications occur, this tool is a text converter.

EXAMPLESBasic operation examples. Single command translation, assuming the original file: create test1 hash:ip,port family inet counters timeout 300 hashsize 1024 maxelem 65536 bucketsize 12 initval 0xb5c4be5d add test1 1.1.1.1,udp:20 add test1 1.1.1.1,21 create test2 hash:ip,port family inet hashsize 1024 maxelem 65536 bucketsize 12 initval 0xb5c4be5dwhich results in the following translation: root@machine:~# ipset-translate restore < file.ipt add set inet global test1 { type ipv4_addr . inet_proto . inet_service; counter; timeout 300s; size 65536; } add element inet global test1 { 1.1.1.1 . udp . 20 } add element inet global test1 { 1.1.1.1 . tcp . 21 } add set inet global test2 { type ipv4_addr . inet_proto . inet_service; size 65536; }

LIMITATIONSA few IP sets options may be not supported because they are not yet implemented in nftables(8). Contrary to nftables(8), IP sets are not attached to a specific table. The translation utility assumes that sets are created in a table whose name is global and family is inet. You might want to update the resulting translation to use a different table name and family for your sets. To get up-to-date information about this, please head to https://wiki.nftables.org/.

SEE ALSOnft(8), ipset(8)

AUTHORSThe nftables framework has been written by the Netfilter Project (https://www.netfilter.org). This manual page was written by Pablo Neira Ayuso <pablo@netfilter.org>. This documentation is free/libre under the terms of the GPLv2+. This tool was funded through the NGI0 PET Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 825310.
0
Johanes Gumabo
Data Size   :   6,648 byte
man-ipset-translate.8Build   :   2024-12-05, 20:55   :  
Visitor Screen   :   x
Visitor Counter ( page / site )   :   3 / 187,241
Visitor ID   :     :  
Visitor IP   :   18.191.192.113   :  
Visitor Provider   :   AMAZON-02   :  
Provider Position ( lat x lon )   :   39.962500 x -83.006100   :   x
Provider Accuracy Radius ( km )   :   1000   :  
Provider City   :   Columbus   :  
Provider Province   :   Ohio ,   :   ,
Provider Country   :   United States   :  
Provider Continent   :   North America   :  
Visitor Recorder   :   Version   :  
Visitor Recorder   :   Library   :  
Online Linux Manual Page   :   Version   :   Online Linux Manual Page - Fedora.40 - march=x86-64 - mtune=generic - 24.12.05
Online Linux Manual Page   :   Library   :   lib_c - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Online Linux Manual Page   :   Library   :   lib_m - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Data Base   :   Version   :   Online Linux Manual Page Database - 24.04.13 - march=x86-64 - mtune=generic - fedora-38
Data Base   :   Library   :   lib_c - 23.02.07 - march=x86-64 - mtune=generic - fedora.36

Very long time ago, I have the best tutor, Wenzel Svojanovsky . If someone knows the email address of Wenzel Svojanovsky , please send an email to johanes_gumabo@yahoo.co.id .
If error, please print screen and send to johanes_gumabo@yahoo.co.id
Under development. Support me via PayPal.