How to create alias with *large* number of hosts?
(X-post from Reddit - https://www.reddit.com/r/PFSENSE/comments/81egao/alias_for_large_number_of_hosts/).
I'm trying to setup some firewall/traffic shaping rules for a large number of hosts (e.g. IP ranges associated with a cloud provider).
The IP ranges are unlikely to change frequently.
What's the recommended way of creating an alias for these?
I did try creating a normal alias in pfSense, with the ranges added as CIDR ranges. For example, one of the CIDR addresses is a /14, and so around 200,000+ IP addresses. However, once I hit submit it seems to cause the webUI to simply hang (I waited for over 10 minutes).
Is there some trick to it?
Why would you not just make a network alias for the /14? That would be one CIDR entry, not 200K different addresses.
See URL Table Type aliases for truly large lists.
^Exactly… I have rfc1918 alias that has all of them in it, which include 10/8 and 172.16/12
My plex alias which allows in the netblocks that plex uses to check if you have remote access and my son's and friends IPs has multiple /12s some /15s and even a new /10 they started using.
When you say Network Alias - do you mean going in via Firewalls, Aliases, IP, then clicking on the green "Add" button?
This is exactly where I went in before, and tried to enter in a few large CIDR ranges - which is when the pfSense WebUI hung on me, as soon as I clicked Save.
Hence, why I didn't know if there was perhaps another place that I should be entering in large ranges?
You have several choices for the TYPE of alias to create there. One of them is Network. One of them is URL Table.
Hit the type dropdown and change to networks..