You certainly wont regret having a emergency ipset of 3.5M entries: I'm sure that every packet that needs to this ipset is like when something drives into a concrete wall
[8690887.043966] SLUB: Unable to allocate memory on node -1 (gfp=0x8020)
[8690887.043969] cache: kmalloc-64, object size: 64, buffer size: 64, default order: 0, min order: 0
[8690887.043974] node 0: slabs: 32738, objs: 2095232, free: 0
[8691714.855952] ipset: page allocation failure: order:0, mode:0x200020
[8691714.855965] CPU: 0 PID: 11215 Comm: ipset Not tainted 3.10.0-1160.119.1.el7.x86_64 #1
[8691714.855967] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
one honk maybe more
jeroen@secluded.ch
replied 19 Dec 2024 13:33 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/qPh5TkbJt2T7kBWS4v
benjojo
replied 19 Dec 2024 15:00 +0000
in reply to: https://secluded.ch/users/jeroen/statuses/113679741269720975
penguin42@mastodon.o..
replied 19 Dec 2024 14:01 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/qPh5TkbJt2T7kBWS4v
benjojo
replied 19 Dec 2024 15:00 +0000
in reply to: https://mastodon.org.uk/users/penguin42/statuses/113679850828829967
benjojo
replied 19 Dec 2024 17:01 +0000
in reply to: https://mastodon.social/users/cks/statuses/113680484183355729
@cks this is very much a emergency "all other options are bad, so huge ipset here we go", so as far as things go it did a good job. Now the job is to actually replace the system to get away from this hack job...
russss@chaos.social
replied 19 Dec 2024 12:15 +0000
in reply to: https://benjojo.co.uk/u/benjojo/h/qPh5TkbJt2T7kBWS4v
jamesog@mastodon.soc..
replied 19 Dec 2024 12:17 +0000
in reply to: https://chaos.social/users/russss/statuses/113679435753985552