Date: Tue, 24 Aug 2021 16:44:57 -0500 From: Tim Daneliuk <tundra@tundraware.com> To: FreeBSD Mailing List <freebsd-questions@freebsd.org> Subject: ipfw Table Organization Message-ID: <9e6cd8e2-a06e-468b-7245-d5ff13309763@tundraware.com>
next in thread | raw e-mail | index | archive | help
Is there any particular advantage - performance or otherwise - to breaking up a large ipfw table into smaller tables? We have a few firewalls approaching 100,000 rules for blocking addresses and CIDR blocks. The IPS are read from separate text files in a loop in the firewall init code, but are all written to a single table. This is easy to maintain, but the concern is that we may be clobbering runtime performance. Thanks...
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9e6cd8e2-a06e-468b-7245-d5ff13309763>