I'm wondering how scalable it is to add IP addresses or subranges I want to block into ufw. E.g., I do this whenever I discover a particularly bad bot or server farm. As my list grows, I wonder how much overhead I'm placing on the system; because now every packet must be checked against this list.
Does anyone have experience with a block list of a certain size that began to cause system load, or network slowdowns?
Is there anything in the docs somewhere about this?
Right now I've got about 15 rules. Is there some number of rules I should stay below?