{"id":2681,"date":"2022-12-20T15:17:01","date_gmt":"2022-12-20T18:17:01","guid":{"rendered":"http:\/\/lode.uno\/linux-man\/index.php\/2022\/12\/20\/ipset-translate-man8\/"},"modified":"2022-12-20T15:17:01","modified_gmt":"2022-12-20T18:17:01","slug":"ipset-translate-man8","status":"publish","type":"post","link":"https:\/\/lode.uno\/linux-man\/2022\/12\/20\/ipset-translate-man8\/","title":{"rendered":"IPSET-TRANSLATE (man8)"},"content":{"rendered":"

IPSET-TRANSLATE<\/h1>\n

NAME<\/a>
DESCRIPTION<\/a>
USAGE<\/a>
EXAMPLES<\/a>
LIMITATIONS<\/a>
SEE ALSO<\/a>
AUTHORS<\/a> <\/p>\n

\n

NAME <\/a> <\/h2>\n

ipset-translate \u2014 translation tool to migrate from ipset to nftables<\/p>\n

DESCRIPTION <\/a> <\/h2>\n

This tool allows system administrators to translate a given IP sets file to nftables(8)<\/b>.<\/p>\n

The only available command is:<\/p>\n\n\n
<\/td>\n\n

\u2022<\/p>\n<\/td>\n

<\/td>\n\n

ipset-translate restores < file.ipt<\/p>\n<\/td>\n

 <\/td>\n<\/tr>\n<\/table>\n

USAGE <\/a> <\/h2>\n

The ipset-translate<\/b> tool reads an IP sets file in the syntax produced by ipset(8)<\/b> save. No set modifications occur, this tool is a text converter.<\/p>\n

EXAMPLES <\/a> <\/h2>\n

Basic operation examples.<\/p>\n

Single command translation, assuming the original file:<\/p>\n

create test1 hash:ip,port family inet counters timeout 300 hashsize 1024 maxelem 65536 bucketsize 12 initval 0xb5c4be5d
add test1 1.1.1.1,udp:20
add test1 1.1.1.1,21
create test2 hash:ip,port family inet hashsize 1024 maxelem 65536 bucketsize 12 initval 0xb5c4be5d<\/p>\n

which results in the following translation:<\/p>\n

root@machine:~# ipset-translate restore < file.ipt
add set inet global test1 { type ipv4_addr . inet_proto . inet_service; counter; timeout 300s; size 65536; }
add element inet global test1 { 1.1.1.1 . udp . 20 }
add element inet global test1 { 1.1.1.1 . tcp . 21 }
add set inet global test2 { type ipv4_addr . inet_proto . inet_service; size 65536; }<\/p>\n

LIMITATIONS <\/a> <\/h2>\n

A few IP sets options may be not supported because they are not yet implemented in nftables(8)<\/b>.<\/p>\n

Contrary to nftables(8)<\/b>, IP sets are not attached to a specific table. The translation utility assumes that sets are created in a table whose name is global<\/b> and family is inet<\/b>. You might want to update the resulting translation to use a different table name and family for your sets.<\/p>\n

To get up-to-date information about this, please head to https:\/\/wiki.nftables.org\/<\/b>.<\/p>\n

SEE ALSO <\/a> <\/h2>\n

nft(8)<\/b>, ipset(8)<\/b><\/p>\n

AUTHORS <\/a> <\/h2>\n

The nftables framework has been written by the Netfilter Project (https:\/\/www.netfilter.org).<\/p>\n

This manual page was written by Pablo Neira Ayuso .<\/p>\n

This documentation is free\/libre under the terms of the GPLv2+.<\/p>\n

This tool was funded through the NGI0 PET Fund, a fund established by NLnet with financial support from the European Commission\u2019s Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 825310.<\/p>\n

\n","protected":false},"excerpt":{"rendered":"

ipset-translate \u2014 translation tool to migrate from ipset to nftables <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[5,52,32,4],"class_list":["post-2681","post","type-post","status-publish","format-standard","hentry","category-8-administracion-del-sistema","tag-5","tag-administracion","tag-ipset-translate","tag-man8"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/2681","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/comments?post=2681"}],"version-history":[{"count":0,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/2681\/revisions"}],"wp:attachment":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/media?parent=2681"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/categories?post=2681"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/tags?post=2681"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}