Seguir

Been testing IPset with the 10k IPs block list from the free tier of abuseipdb.com/ and it reduced the load on a LAMP server by close to 50%. Pretty amazing if these results are validated over time.

@hugo

Ah Thats great! I have been reporting IPs to them for the last 5 years now, and we use the api at work too

@selea I have been using them manually over the years to validate blocks from my firewall but never used their block list or made any reports. But now I am thinking that maybe I should :)

@hugo How doea that work with your web server? Seems like a IP query for every request would slow things down a bit. Also has it affected ad revenue?

@pj I can't say about ad revenue as I don't run any site with ads.

In terms of request, you just do one request per day and fetch the free 10k IPs at once. Then you need to have to install ipset.netfilter.org/ and configure it to use that list. IPset runs in memory, so it's pretty fast and the extra memory it uses on the server that I am testing, is nothing compared to the extra memory that was being wasted 'answering' spam/attack requests.

@lisbonjoker Yes, on that server yes. Apache with ipset.netfilter.org/ is not very resource hungry and as it runs in memory it can parse the 10k IP list pretty darn fast.

Inicie a sessão para participar na conversa
Mastodon (PT)

Mastodon é uma rede social baseada em protocolos abertos da web e software livre e gratuito. É descentralizado como e-mail.