which is faster a many entries in the firewall or one with ip list

RouterOS Beginner Basics
1

That is, does it make sense (in terms of speed) to replace
/ip firewall filter add chain=input src-address=1.1.1.1/32 action=accept
/ip firewall filter add chain=input src-address=1.2.1.1/32 action=accept
/ip firewall filter add chain=input src-address=1.3.1.1/32 action=accept
/ip firewall filter add chain=input src-address=1.4.1.1/32 action=accept
replaced by
ip firewall address-list add address=1.1.1.1/32 list=permit_t
ip firewall address-list add address=1.2.1.1/32 list=permit_t
ip firewall address-list add address=1.3.1.1/32 list=permit_t
ip firewall address-list add address=1.4.1.1/32 list=permit_t
/ip firewall filter add chain=input src-list=permit_t action=accept

2

Hello,

It’s better on CPU to have one fw filter using an address list.

Cheers,


Sent from Tapatalk

3

Address list is much more efficient for CPU than multiple FW lines.