This is caused be mismatch between Kernel and iproute2 version. The kernel v5 offers ipset v7 which causes iproute to not be built with ematch ipset functionality.
This has been fixed in iproute upstream in - its a one line fix - Pulling this into iproute2 and rebuilding (After committing it) works. https://github.com/shemminger/iproute2/commit/650591a7a70cd79d826fcdc579a20c168c987cf2 commit 650591a7a70cd79d826fcdc579a20c168c987cf2 Author: Tony Ambardar <tony.ambar...@gmail.com> Date: Tue Jul 7 00:58:33 2020 -0700 configure: support ipset version 7 with kernel version 5 The configure script checks for ipset v6 availability but doesn't test for v7, which is backward compatible and used on kernel v5.x systems. Update the script to test for both ipset versions. Without this change, the tc ematch function em_ipset will be disabled. Signed-off-by: Tony Ambardar <tony.ambar...@gmail.com> Signed-off-by: Stephen Hemminger <step...@networkplumber.org> ** Changed in: iproute2 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to iproute2 in Ubuntu. https://bugs.launchpad.net/bugs/1920794 Title: tc tool does not accept ipset match Status in iproute2 package in Ubuntu: Confirmed Bug description: Steps to reproduce: tc qdisc add dev eth0 root handle 1: htb tc class add dev eth0 parent 1: classid 1:1 htb rate 1024Kbit ipset create mytest hash:net tc filter add dev eth0 protocol ip parent 1:0 prio 1 basic match 'ipset(mytest src)' classid 1:1 Last command fails with the message: Unknown ematch "ipset" Illegal "ematch" It works well with 18.04. On 20.04 machine it also works fine inside Ubuntu 18.04 LXD container. ProblemType: Bug DistroRelease: Ubuntu 20.04 Package: iproute2 5.5.0-1ubuntu1 ProcVersionSignature: Ubuntu 5.4.0-51.56-generic 5.4.65 Uname: Linux 5.4.0-51-generic x86_64 NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair ApportVersion: 2.20.11-0ubuntu27.9 Architecture: amd64 CasperMD5CheckResult: skip Date: Mon Mar 22 16:18:17 2021 SourcePackage: iproute2 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/iproute2/+bug/1920794/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
