I am trying to find a solution to dynamically filter network packets with strict timing constraints and based on a IP list on a Linux Operating System
I cannot install additional software of modify kernel or libraries to add modules to iptables for example
I have an equipment that receive too much network packet and I need to find a way to filter network packets dynamically with a 200ms cycle.
For example, let's say I have 3 IPs (192.168.0.1,192.168.0.2,192.168.0.3) I would need to dynamically change every 200ms the iptable configuration to block the 1st IP packets for the 1st 200ms cycle, then block the second IP packets for the 2nd 200ms cycle, so on and so forth
Would anyone know any efficient solution that take into accounts this stringent time constraint ? My first idea is to dynamically change the iptables configuration but I'm concerned about the performance and the timing,
Would anyone have performed the same kind of work or knows a solution already implemented and working ?
Thanks a lot for your help,
ipset
may be helpful rather than changing the iptables rules.