IPSET / Faststart
Posted: 07 Jul 2015, 09:19
Currently CSF is using separate calls to support ipset and with a big list of blocked ip-adresses (25000) this takes a long time to add al of them to ipset.
Before the CSF ipset support we where using our own implementation of ipset and we are using the restore method of ipset to import the list very fast. What you do is create a file with al of the add calls like this.
File ipset.records:
And then restore the rules like this
I think this could be a huge preformance boost for csf with ipset when Faststart is enabled.
Before the CSF ipset support we where using our own implementation of ipset and we are using the restore method of ipset to import the list very fast. What you do is create a file with al of the add calls like this.
File ipset.records:
Code: Select all
add -exist list_name 1.2.3.5
add -exist list_name 1.2.3.4
add -exist list_name 1.2.3.7Code: Select all
ipset restore -! < ipset.records