search

Lochnair / xt_tls

Filter TLS traffic with IPtables
GNU General Public License v3.0
230 stars 46 forks source link

Add capability to match a set containing multiple hostnames with a single rule #30

Closed mpolk closed 5 years ago

mpolk commented 5 years ago

Matching each packet with many hostnames using a separate rule for each hostname is very inefficient.

I propose to use a mechanism similar to ipsets - the hostsets. A "hostset" is like an ipset (tree-based), but contains the host name, rather than ip-addresses. The content of the hostset can be manipulated using the /proc filesystem.

Lochnair commented 5 years ago

Merged in https://github.com/Lochnair/xt_tls/commit/99a11843cdff137c83bad41dfffb36083c9c9377. Thanks!