Block ASN instead of IP/CIDRs on Ubuntu [closed]












-2















I am planning to block too many IPs (60k CIDRs) so I am concerned about the performance of my f1.micro (512MB RAM) Ubuntu 18 server.



Is it possible to block ASN instead of blocking individual CIDRs?



If not possible then what would be the best practice to add entries into the server without having any performance issue?






ubuntu ip ipv4 cidr







share|improve this question















closed as off-topic by duskwuff, tripleee, jww, AdrianHHH, Makyen Jan 2 at 8:51


This question appears to be off-topic. The users who voted to close gave these specific reasons:



  • "Questions about general computing hardware and software are off-topic for Stack Overflow unless they directly involve tools used primarily for programming. You may be able to get help on Super User." – duskwuff, tripleee, Makyen

  • "Questions on professional server- or networking-related infrastructure administration are off-topic for Stack Overflow unless they directly involve programming or programming tools. You may be able to get help on Server Fault." – jww, AdrianHHH


If this question can be reworded to fit the rules in the help center, please edit the question.












  • 3





    Stack Overflow is a site for programming and development questions. You should use another site on the Stack Exchange network for this question.

    – jww
    Jan 2 at 6:13
















-2















I am planning to block too many IPs (60k CIDRs) so I am concerned about the performance of my f1.micro (512MB RAM) Ubuntu 18 server.



Is it possible to block ASN instead of blocking individual CIDRs?



If not possible then what would be the best practice to add entries into the server without having any performance issue?






ubuntu ip ipv4 cidr







share|improve this question















closed as off-topic by duskwuff, tripleee, jww, AdrianHHH, Makyen Jan 2 at 8:51


This question appears to be off-topic. The users who voted to close gave these specific reasons:



  • "Questions about general computing hardware and software are off-topic for Stack Overflow unless they directly involve tools used primarily for programming. You may be able to get help on Super User." – duskwuff, tripleee, Makyen

  • "Questions on professional server- or networking-related infrastructure administration are off-topic for Stack Overflow unless they directly involve programming or programming tools. You may be able to get help on Server Fault." – jww, AdrianHHH


If this question can be reworded to fit the rules in the help center, please edit the question.












  • 3





    Stack Overflow is a site for programming and development questions. You should use another site on the Stack Exchange network for this question.

    – jww
    Jan 2 at 6:13














-2












-2








-2


1






I am planning to block too many IPs (60k CIDRs) so I am concerned about the performance of my f1.micro (512MB RAM) Ubuntu 18 server.



Is it possible to block ASN instead of blocking individual CIDRs?



If not possible then what would be the best practice to add entries into the server without having any performance issue?






ubuntu ip ipv4 cidr







share|improve this question
















I am planning to block too many IPs (60k CIDRs) so I am concerned about the performance of my f1.micro (512MB RAM) Ubuntu 18 server.



Is it possible to block ASN instead of blocking individual CIDRs?



If not possible then what would be the best practice to add entries into the server without having any performance issue?






ubuntu ip ipv4 cidr




ubuntu ip ipv4 cidr






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Jan 2 at 5:41







Kolkata Calcutta

















asked Jan 2 at 5:32









Kolkata CalcuttaKolkata Calcutta

349




349




closed as off-topic by duskwuff, tripleee, jww, AdrianHHH, Makyen Jan 2 at 8:51


This question appears to be off-topic. The users who voted to close gave these specific reasons:



  • "Questions about general computing hardware and software are off-topic for Stack Overflow unless they directly involve tools used primarily for programming. You may be able to get help on Super User." – duskwuff, tripleee, Makyen

  • "Questions on professional server- or networking-related infrastructure administration are off-topic for Stack Overflow unless they directly involve programming or programming tools. You may be able to get help on Server Fault." – jww, AdrianHHH


If this question can be reworded to fit the rules in the help center, please edit the question.







closed as off-topic by duskwuff, tripleee, jww, AdrianHHH, Makyen Jan 2 at 8:51


This question appears to be off-topic. The users who voted to close gave these specific reasons:



  • "Questions about general computing hardware and software are off-topic for Stack Overflow unless they directly involve tools used primarily for programming. You may be able to get help on Super User." – duskwuff, tripleee, Makyen

  • "Questions on professional server- or networking-related infrastructure administration are off-topic for Stack Overflow unless they directly involve programming or programming tools. You may be able to get help on Server Fault." – jww, AdrianHHH


If this question can be reworded to fit the rules in the help center, please edit the question.








  • 3





    Stack Overflow is a site for programming and development questions. You should use another site on the Stack Exchange network for this question.

    – jww
    Jan 2 at 6:13














  • 3





    Stack Overflow is a site for programming and development questions. You should use another site on the Stack Exchange network for this question.

    – jww
    Jan 2 at 6:13








3




3





Stack Overflow is a site for programming and development questions. You should use another site on the Stack Exchange network for this question.

– jww
Jan 2 at 6:13





Stack Overflow is a site for programming and development questions. You should use another site on the Stack Exchange network for this question.

– jww
Jan 2 at 6:13












1 Answer
1






active

oldest

votes


















-1














A simple answer is no.



Any computer that sends request to your server will only let you know its IP address and there is no automatic process to convert the IP address to ASN, hence there is no native matching process that can match an IP with its associated ASN..



This will guide you on how ot efficiently block IPs on a Linux server. https://superuser.com/questions/810853/how-do-i-block-a-host-by-asn-example-as16276






share|improve this answer






























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    -1














    A simple answer is no.



    Any computer that sends request to your server will only let you know its IP address and there is no automatic process to convert the IP address to ASN, hence there is no native matching process that can match an IP with its associated ASN..



    This will guide you on how ot efficiently block IPs on a Linux server. https://superuser.com/questions/810853/how-do-i-block-a-host-by-asn-example-as16276






    share|improve this answer




























      -1














      A simple answer is no.



      Any computer that sends request to your server will only let you know its IP address and there is no automatic process to convert the IP address to ASN, hence there is no native matching process that can match an IP with its associated ASN..



      This will guide you on how ot efficiently block IPs on a Linux server. https://superuser.com/questions/810853/how-do-i-block-a-host-by-asn-example-as16276






      share|improve this answer


























        -1












        -1








        -1







        A simple answer is no.



        Any computer that sends request to your server will only let you know its IP address and there is no automatic process to convert the IP address to ASN, hence there is no native matching process that can match an IP with its associated ASN..



        This will guide you on how ot efficiently block IPs on a Linux server. https://superuser.com/questions/810853/how-do-i-block-a-host-by-asn-example-as16276






        share|improve this answer













        A simple answer is no.



        Any computer that sends request to your server will only let you know its IP address and there is no automatic process to convert the IP address to ASN, hence there is no native matching process that can match an IP with its associated ASN..



        This will guide you on how ot efficiently block IPs on a Linux server. https://superuser.com/questions/810853/how-do-i-block-a-host-by-asn-example-as16276







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Jan 2 at 8:05









        AnthemAnthem

        546




        546

















            Popular posts from this blog

            MongoDB - Not Authorized To Execute Command

            Image
            .everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box; } 0 I have successfully enabled authorization on MongoDB and I have created an account on the admin database and then I created an account for my database called test. The following connection string to connect to my test database works successfully: mongo --host 192.168.17.52 --port 27017 -u user1 -p password --authenticationDatabase test Only problem I have now is, I cannot execute commands such as: show dbs. I get the following error when I try to do so: "errmsg" : "not authorized on admin to execute command { listDatabases: 1.0, lsid: { id: UUID("a1d5bc0d-bc58-485e-b232-270758a89455") }, $db: "admin...
            Read more

            How to fix TextFormField cause rebuild widget in Flutter

            Image
            .everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box; } 0 I've got the same issue at #9280. I tried all solutions from that topic with/without GlobalKey for Scaffold and Form but the problem wasn't fixed. I tried to build a authentication form with login and signup. But the keyboard doesn't show when I tap the TextFormField at the first time. Then I try to input some letter from physical keyboard, the widget is rebuilt. Like this: login screen Nothing to be log when I run flutter run --verbose, so I logged manually. Every tapping on field, the widget called dispose -> init -> build. [√] Flutter (Channel beta, v1.0.0, on Microsoft Windows [Version 10.0.17763.195], ...
            Read more

            in spring boot 2.1 many test slices are not allowed anymore due to multiple @BootstrapWith

            Image
            1 I tried to upgrade a yummy sandwich made of two test slices (@JsonTest and @JdbcTest in my case, crunchy test code in between) adding spring boot 2.1 flavour to it. But it seems it was not much of a success. I cannot annotate my tests with many @...Test since they are now each bringing their own XxxTestContextBootstrapper. It used to work when they all used same SpringBootTestContextBootstrapper. @RunWith(SpringRunner.class) @JdbcTest @JsonTest public class Test { @Test public void test() { System.out.printn("Hello, World !"); } } The error I get from BootstrapUtils is illegalStateException : Configuration error: found multiple declarations of @BootstrapWith for test class I understand I might be doing something wrong here but is there an easy way I could load both Json and Jdbc contex...
            Read more