3 ms·
> Also curious what are the performance implications for adding to your firewall about 2 million IPs or maybe a couple 100k if you're brave to do ranges. OpenB
by accrual 2y ago
> Also curious what are the performance implications for adding to your firewall about 2 million IPs or maybe a couple 100k if you're brave to do ranges.
OpenBSD's pf firewall supports tables of IP address which can be black or whitelisted. From their FAQ:
> A table is ideal for holding a large group of addresses as the lookup time on a table holding 50,000 addresses is only slightly more than for one holding 50 addresses.
https://www.openbsd.org/faq/pf/tables.html https://www.openbsd.org/faq/pf/tables.html