Is that 2.2 million CIDRs, or actual addresses? I use IPFW with tables for about 20k CIDRs. I don't see any significant server load. It seems to me nginx has a big enough task that it makes sense to offload the blocking to something that is more tightly integrated to the OS.
At a bare minimum, block OVH and Hetzner. People bash the Russians and old Soviet block countries for hacking, but OVH and Hetzner are far worse. Original Message From: mayak Sent: Tuesday, November 8, 2016 2:58 PM To: nginx@nginx.org Reply To: nginx@nginx.org Subject: Re: Blocking tens of thousands of IP's On 11/08/2016 07:28 PM, Jonathan Vanasco wrote: > On Nov 4, 2016, at 5:43 AM, mex wrote: > >> we do a similar thing but keep a counter within nginx (lua_shared_dict FTW) >> and export this stuff via /badass - location. >> >> although its not realtime we have a delay of 5 sec which is enough for us <snip> We are blocking 2.2 million addresses, however, we do it at the firewall/router (pfsense pfBlocker). Ultra fast. HTH Mayak _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx
