by ignasl on 6/17/19, 8:31 PM with 2 comments
by LinuxBender on 6/17/19, 8:41 PM
ip route add blackhole "${ip}"
Blocking via route uses less CPU and memory than iptables+iplist hashes, but iplist hashes can be useful if you want to track what is being blocked. If using iptables, be sure to block in the raw table to avoid connection tracking table CPU hits.by jonnys1 on 6/17/19, 8:36 PM