On Mon, Apr 15, 2019 at 08:39:30PM +0200, Klaus Darilion wrote:
> Hello!
> Is there a max number of actions, before there might be performance
> problems?

Yes. The design goal is not to have hundreds of rules, but to have fewer,
more powerful rules.

For example, in your case, you can do:
addAction({"lots", "of", "domains"}, DropAction())

This is then fast, much faster than three separate rules.

You can also create a SuffixMatchNode and fill it programatically and then
use a SuffixMatchNodeRule(smn) on it.

Finally for your case, which I spotted on another list, you may want to look
at https://dnsdist.org/guides/dynblocks.html which can be a lot of fun.

dnsdist mailing list

Reply via email to