View Single Post
  #2  
Old 29th May 2013, 00:17
monkfish monkfish is offline
HowtoForge Supporter
 
Join Date: Mar 2013
Posts: 106
Thanks: 9
Thanked 15 Times in 14 Posts
Default

Can't say for vmalloc but not sure it will address your issue if you have large iptables rulesets.

Are you doing something like blocking large netranges, eg countries with individual rulesets? Checkout ipset instead which will give you better perfomance, consolidation of rulesets and may well solve your vmalloc problem.
Reply With Quote