* Iptables Forward Limit
@ 2005-10-06 16:18 ZeuS SN
2005-10-07 18:32 ` Henrik Nordstrom
0 siblings, 1 reply; 2+ messages in thread
From: ZeuS SN @ 2005-10-06 16:18 UTC (permalink / raw)
To: netfilter
I have to add many rules to the Filter/Forward table with iptables, and
I have the next question :
There is any limit of rules that can be added to the forward table ?
I can add 2048 rules, 10000000 rules ?
Regards
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Iptables Forward Limit
2005-10-06 16:18 Iptables Forward Limit ZeuS SN
@ 2005-10-07 18:32 ` Henrik Nordstrom
0 siblings, 0 replies; 2+ messages in thread
From: Henrik Nordstrom @ 2005-10-07 18:32 UTC (permalink / raw)
To: ZeuS SN; +Cc: netfilter
On Thu, 6 Oct 2005, ZeuS SN wrote:
> There is any limit of rules that can be added to the forward table ? I can
> add 2048 rules, 10000000 rules ?
There is two limits:
- Memory usage. The more rules, the more memory is used for the rules.
With too many rules you run out of memory.
- Speed. iptables with it's linear lookup is not very efficient at
handling large rulesets. But nf-hipac is a good alternative in such
situations. <url:http://www.hipac.org/>
Regards
Henrik
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2005-10-07 18:32 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-10-06 16:18 Iptables Forward Limit ZeuS SN
2005-10-07 18:32 ` Henrik Nordstrom
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.