Timeline for Mass IP Blocking affecting server performance?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 24, 2016 at 12:26 | vote | accept | Brian Briu | ||
| Jan 28, 2016 at 12:40 | history | edited | Stéphane Chazelas | CC BY-SA 3.0 | added 264 characters in body |
| Jan 28, 2016 at 12:00 | comment | added | Thomas | Every packet inspection does need resources. On the server or on router level. Ipsets have been designed to deal with large datasets (as opposed to iptables) and have a near linear latency. Please read the 2nd link ( daemonkeeper.net/781/mass-blocking-ip-addresses-with-ipset ) I had in my answer. At the end you have to run your own tests, what is acceptable for you. | |
| Jan 28, 2016 at 11:35 | comment | added | Brian Briu | Is it a safe method? I have a game server running on it, and it tracks even the simplest movement of the player, that means that packets are sent. Then there's the chat, and the interaction with different items, etc. I just want to know if it is not going to slow down the server. The servers runs on an UDP infrastructure, so does this method iterate through the list when even the simplest packet is sent? Everything you do on the server means that there is a packet sent to the server from the client, so does it affect the performance of the server? Give me a command to stop iptables if needed:) | |
| Jan 28, 2016 at 11:19 | history | answered | Thomas | CC BY-SA 3.0 |