1 dépôt
Techniques for structuring network address data to ensure high-performance lookups within kernel-level firewall filtering mechanisms.
Distinct from IP Data Optimizations: Distinct from IP Data Optimizations: focuses on kernel-level IP set structures for active traffic inspection rather than general database compression.
Explore 1 awesome GitHub repository matching data & databases · Kernel-Level IP Set Optimizations. Refine with filters or upvote what's useful.
This project is a security utility for aggregating threat intelligence and automating the deployment of high-performance firewall rules. It functions as an aggregator that fetches and normalizes malicious IP address lists from multiple external security feeds and a management tool that deploys these lists into the Linux kernel using ipset for packet filtering. The system maintains network perimeter defense by using atomic kernel updates to swap IP sets, which allows firewall rules to be updated without interrupting active connections. It includes a range optimizer that simplifies network addr
Structures network address data for high-performance lookups within kernel-level firewall filtering mechanisms.