Re: simply copy mapped value into acl

2015-11-23 Thread Andrew Hayworth
On Mon, Nov 23, 2015 at 10:52 AM, Dennis Jacobfeuerborn wrote: > Hm, I wasn't aware of the -M flag, thanks! > > However in you example you again you have to do multiple lookups even > though that shouldn't be necessary. I can make decisions based on the > fact that the IP

Re: simply copy mapped value into acl

2015-11-23 Thread Dennis Jacobfeuerborn
On 16.11.2015 15:25, Dennis Jacobfeuerborn wrote: > Hi, > I'm trying to figure out the best way to match a source ip against an ip > mapping file and make decisions based on that. What I'm now doing is this: > > acl acl_is_xx src,map_ip() -m str xx > acl acl_is_yy src,map_ip() -m str yy > >

Re: simply copy mapped value into acl

2015-11-23 Thread Willy Tarreau
On Tue, Nov 24, 2015 at 01:44:07AM +0100, Dennis Jacobfeuerborn wrote: > On 23.11.2015 22:38, Willy Tarreau wrote: > > Hi Andrew, > > > > On Mon, Nov 23, 2015 at 12:19:22PM -0600, Andrew Hayworth wrote: > >> That said, the difference between one and two map lookups is > >> negligible, so I don't

Re: simply copy mapped value into acl

2015-11-23 Thread Dennis Jacobfeuerborn
On 23.11.2015 19:19, Andrew Hayworth wrote: > On Mon, Nov 23, 2015 at 10:52 AM, Dennis Jacobfeuerborn > wrote: >> Hm, I wasn't aware of the -M flag, thanks! >> >> However in you example you again you have to do multiple lookups even >> though that shouldn't be necessary. I

Re: simply copy mapped value into acl

2015-11-23 Thread Dennis Jacobfeuerborn
On 23.11.2015 22:38, Willy Tarreau wrote: > Hi Andrew, > > On Mon, Nov 23, 2015 at 12:19:22PM -0600, Andrew Hayworth wrote: >> That said, the difference between one and two map lookups is >> negligible, so I don't think you're saving much this way and it'll >> make configuration harder in some

Re: simply copy mapped value into acl

2015-11-23 Thread Andrew Hayworth
On Mon, Nov 23, 2015 at 6:26 AM, Dennis Jacobfeuerborn wrote: > > On 16.11.2015 15:25, Dennis Jacobfeuerborn wrote: > > Hi, > > I'm trying to figure out the best way to match a source ip against an ip > > mapping file and make decisions based on that. What I'm now doing is

Re: simply copy mapped value into acl

2015-11-23 Thread Dennis Jacobfeuerborn
On 23.11.2015 17:04, Andrew Hayworth wrote: > On Mon, Nov 23, 2015 at 6:26 AM, Dennis Jacobfeuerborn > wrote: >> >> On 16.11.2015 15:25, Dennis Jacobfeuerborn wrote: >>> Hi, >>> I'm trying to figure out the best way to match a source ip against an ip >>> mapping file and

Re: simply copy mapped value into acl

2015-11-23 Thread Willy Tarreau
Hi Andrew, On Mon, Nov 23, 2015 at 12:19:22PM -0600, Andrew Hayworth wrote: > That said, the difference between one and two map lookups is > negligible, so I don't think you're saving much this way and it'll > make configuration harder in some ways if you keep adding IPs. I can > vouch from