Consider switching to ipset-s or null routes, both have a lower overhead than plain iptables rules.

We've tested ipsets with hundreds of thousands of IPs, ipset-s also have the benefit of supporting entry expiration (timeout).

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to