LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Blogs
Reload this Page unSpawn
User Name
Password

Notices


Old

Iptables rule traversal: bandwidth at >= 10K of IP addresses

Posted 11-24-2011 at 08:07 PM by unSpawn
Updated 11-24-2011 at 02:53 PM by unSpawn
Anyone who is interested in iptables performance will find Harris, Melara, Smith and Nico's "Performance analysis of the Linux firewall in a host" (2002) and Kadlecsik and Pásztor's "Netfilter Performance Testing" (2005). But what actually is the effect of a large rule set on performance?

The attached PDF I created is not an an exhaustive study of Netfilter performance but shows you Jperf data and pictures (joy!) for plain rule sets, ipset (iphash) and the iptables...
Continue reading...
Attached Images
File Type: pdf Iptables rule traversal.pdf (551.9 KB, 166 views)
Moderator
Posted in Uncategorized
Views 6162 Comments 0 unSpawn is offline
Old

Denyhosts vs Fail2ban aka tcp_wrappers vs iptables

Posted 07-22-2010 at 03:58 AM by unSpawn
At times denyhosts is being recommended over fail2ban. The common misconception being these applications are equal. They're not, OK in more than one way, but focusing on method of filtering denyhosts uses tcp_wrappers by default where Fail2ban uses iptables by default.

Using tcp_wrappers means a packet has to be delivered to that service. The serving application is responsible for reading /etc/hosts.{deny,allow} to determine itself if a connection is allowed or not. Requiring a network...
Continue reading...
Moderator
Posted in Uncategorized
Views 9065 Comments 1 unSpawn is offline

  



All times are GMT -5. The time now is 10:23 AM.

Contact Us - Advertising Info - Rules - Privacy - LQ Merchandise - Donations - Contributing Member - LQ Sitemap -
Main Menu
Advertisement
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration