Ungh. Gotta do something about iocaine's firewalling performance.

Had to restart it on Eru, because 31GiB resident memory was making the server crawl.

Firewalling temporarily disabled, because it's currently causing more trouble than what it is worth. sigh

Looks like single-threading it was a bad idea. I either need batching, or a small pool, or both.

A single thread in a release build can do ~4-5 blocks / sec on my development box. That's... piss poor.

On top of that, it slows down over time.

@algernon errr... so... an ffi call to add entry to nft ipset can be executed at a rate of max 5 per second... wow...
@petko It's a bit more complicated than that. The library I'm using does quite a bit of work to add an entry. If I batch it, and insert entries by batches of 1000, that's a lot faster. Like, about 1000 times faster. :D