Quantcast
Channel: All EdgeRouter posts
Viewing all articles
Browse latest Browse all 60861

Re: Black hole route vs firewall rule to drop packets

$
0
0

a firewall rule uses ipset lists, this is a fast mechanism to match traffic for a huge address/network group.

(like country , or spam blacklists)

I'm not sure route table will be as fast with all individual settings in them.

 

 

Moreover, route table is single place for all, whereas in firewall rules, you can have seperate groups for country ru and cn ....


Viewing all articles
Browse latest Browse all 60861

Trending Articles