Netmap-ipfw, how to fill a table by 15K entries ?

Eugene Grosbein eugen at grosbein.net
Tue Dec 23 14:51:40 UTC 2014


On 23.12.2014 20:02, IT Department, AkNet ISP wrote:
> Hello to All
> 
> Can anybody tell, how to fill a table with large number of entries ?
> 
> Sure, It can be done by standard method by ./ipfw table 10 add
> xxx.xxx.xxx.xxx in a script, but each entry takes couple of seconds to
> be placed into a table:
> 
> ./ipfw table 10 add 192.168.10.50
> connected to 127.0.0.1:5555
> 
> And takes many hours to do all job.
> 
> May be there is a way to open a socket and place a bulk commands, for
> example:
> telnet localhost 5555
> table 10 add xxx.xxx.xxx.xxx
> 
> But it doesn't work as written above.
> 
> May be Senior Luigi can explane how to do such work as fast as it
> done by ordinary ipfw ?

/sbin/ipfw can take full pathname of text file containing list of commands like:

table 10 add x.x.x.x
table 10 add x.x.x.y
...

So, it parses them all and executes at once. Read man ipfw, section:
LIST OF RULES AND PREPROCESSING

Eugene Grosbein





More information about the freebsd-net mailing list