How to create alias with *large* number of hosts?



  • (X-post from Reddit - https://www.reddit.com/r/PFSENSE/comments/81egao/alias_for_large_number_of_hosts/).

    Hi,

    I'm trying to setup some firewall/traffic shaping rules for a large number of hosts (e.g. IP ranges associated with a cloud provider).

    The IP ranges are unlikely to change frequently.

    What's the recommended way of creating an alias for these?

    I did try creating a normal alias in pfSense, with the ranges added as CIDR ranges. For example, one of the CIDR addresses is a /14, and so around 200,000+ IP addresses. However, once I hit submit it seems to cause the webUI to simply hang (I waited for over 10 minutes).

    Is there some trick to it?

    Thanks,
    Victor


  • Netgate

    Why would you not just make a network alias for the /14? That would be one CIDR entry, not 200K different addresses.

    See URL Table Type aliases for truly large lists.


  • Rebel Alliance Global Moderator

    ^Exactly… I have rfc1918 alias that has all of them in it, which include 10/8 and 172.16/12

    My plex alias which allows in the netblocks that plex uses to check if you have remote access and my son's and friends IPs has multiple /12s some /15s and even a new /10 they started using.



  • When you say Network Alias - do you mean going in via Firewalls, Aliases, IP, then clicking on the green "Add" button?

    This is exactly where I went in before, and tried to enter in a few large CIDR ranges - which is when the pfSense WebUI hung on me, as soon as I clicked Save.

    Hence, why I didn't know if there was perhaps another place that I should be entering in large ranges?


  • Netgate

    You have several choices for the TYPE of alias to create there. One of them is Network. One of them is URL Table.


  • Rebel Alliance Global Moderator

    Hit the type dropdown and change to networks..