Large external class files kill TMM

the syntax for the extenal file class is something like this:

 

 

class spammers extern {

 

type ip

 

filename "/var/class/spammers"

 

}

 

 

with the restriction that the external datafile needs to reside in either /var/class or /config.

 

 

You have to update your config sync config if you use /var/class to include that file.

 

 

Our situation is slightly different, where the file gets updated dynamically. So, if you update the datafile, you have to either do a 'b load' or add new elements to the list via the 'b class spammers add { host 1.2.3.4 }' construct.

 

 

It's not super fast, as the command will sort the class file numerically. If you've got 200k elements.

 

 

The new trick sounds pretty interesting though.