tree 219cb8d7f6dc167352ed05f02c255b5218a081a5
parent c4262961f8c47b67b22643b9fa4c854246ba7f3e
author Willy Tarreau <w@1wt.eu> 1273773821 +0200
committer Willy Tarreau <w@1wt.eu> 1273779470 +0200
encoding latin1

[MEDIUM] acl: add tree-based lookups of networks

Networks patterns loaded from files for longest match ACL testing
will now be arranged into a prefix tree. This is possible thanks to
the new prefix features in ebtree v6.0. Longest match testing is
slightly slower than exact data maching. However, the measured impact
of running at 42000 requests per second and testing whether the IP
address found in a header belongs to a list of 52000 networks or
not is 3% CPU (increase from 66% to 69%). This is low enough to
permit true geolocation based on huge tables.