Forum Discussion

littlebunny's avatar
littlebunny
Icon for Nimbostratus rankNimbostratus
Jun 04, 2019

How to block large list of IPs on a virtual server

Hello

 

We would like to block around 200k IP addresses from getting past one of our virtual servers. I saw that Data Groups and an iRule is an option but I don't know how realistic this is for a list of so many IPs. Also, the virtual server we'd be applying it to receives a LOT of traffic so would likely grind to a halt having to check each incoming source IP against the blacklist. Is there a more efficient way to do this?

 

Thanks

AK

APM
LTM
security

1 Reply

Sort By
  • Dave_Pisarek's avatar
    Dave_Pisarek
    Icon for Cirrus rankCirrus
    Jun 04, 2019

    Not sure if these ips or a bulk of them could be in the Brightcloud blacklist database that utilizes IPI but it may be worth the money to subscribe to it as it is not that much money. If I was in your shoes I would do the DG and irule if IPI isn't a solution.