topic Impact of large address group in General Topics

Impact of large address group

Dshackelford — Thu, 18 Aug 2011 16:41:06 GMT

What is the performance impact of having many addresses to match against? If I have an address group that has hundreds of individual addresses in it (some FQDN), others ip netmask, will it have a noticible impact on performance? We are using a 2050 primarily for URL filtering.

Re: Impact of large address group

skrall — Mon, 22 Aug 2011 17:12:01 GMT

We do not have any published numbers for such a test case. If possible try to use a subnet to aggregate groups of devices and minimize the number of "look ups" that have to be made. But I think the impact will not be noticable.

Steve Krall

Re: Impact of large address group

Dshackelford — Mon, 22 Aug 2011 17:23:46 GMT

In this case, the addresses cannot be represented by subnets or vlans as they are individual nodes across all our subnets and vlans. I noticed in the config that there is a stated limit of 10,000 under config/devices/platform/limits but I also noticed that in the same area there is a limit of 500 addresses in an address-group. I will take this as the practical limit for us.