Blocking tens of thousands of IP's

[mayak]

On 11/08/2016 07:28 PM, Jonathan Vanasco wrote:
> On Nov 4, 2016, at 5:43 AM, mex wrote:
>
>> we do a similar thing but keep a counter within nginx (lua_shared_dict FTW)
>> and export this stuff via /badass - location.
>>
>> although its not realtime we have a delay of 5 sec which is enough for us
<snip>
We are blocking 2.2 million addresses, however, we do it at the firewall/router (pfsense pfBlocker).

Ultra fast.

HTH

Mayak