Consider using ipset. Your ruleset is very huge and slows down your netfilter... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		rw- on Oct 13, 2010 \| parent \| context \| favorite \| on: Securing your ssh server Consider using ipset. Your ruleset is very huge and slows down your netfilter...

jawn on Oct 13, 2010 [–]

Thank you so much for the tip, I'll look at doing this.

FWIW though I have almost no traffic to these boxes, so I've never noticed any sort of performance issues.

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact