nginx has set up an IP blacklist. The list is very long. There are thousands of entries at present. I wonder if it will affect the performance of nginx?

Question

Because I was attacked by dynamic IP, I added nginx’s IP blacklist (deny IP) through a script. It has reached thousands. This blacklist will become longer and longer. I don’t know if there will be normal access to nginx. performance impact?

Answer 1

It is certain that there will be a certain impact, but it should be very small. You need to do your own testing on the specific impact.

Answer 2

If possible, it is recommended that you drop them in iptables.
In nginx rules, some of your system resources will still be consumed.