Skip to contentSkip to conversation

Iptables Forward Limit

DISCUSSION ZeuS SN 2 participants 2 messages Oct 6, 2005 – Oct 7, 2005

lore
Share & tools
lore

ZeuS SN

author
#0 lore raw

I have to add many rules to the Filter/Forward table with iptables, and I have the next question :

There is any limit of rules that can be added to the forward table ?
I can add 2048 rules, 10000000 rules ?

Regards

#1 lore raw
Quoted 2 lines · ZeuS SN

There is any limit of rules that can be added to the forward table ? I can
add 2048 rules, 10000000 rules ?

There is two limits:

- Memory usage. The more rules, the more memory is used for the rules.
With too many rules you run out of memory.

- Speed. iptables with it's linear lookup is not very efficient at
handling large rulesets. But nf-hipac is a good alternative in such situations. <url:http://www.hipac.org/>

Regards
Henrik