Are there alternatives to ipset that offer similar efficiency in handling large sets of ip addresses or ip address ranges?We originally used iptables to selectively block access to our servers for security- and spam-related reasons.As the list of blocked ip addresses and ip address ranges grew, we migrated to ipset.  And we've been very happy with it.However, we recently migrated most of websites to a VPS (OpenVZ) environment and, in the process, discovered that ipset is not (may not be) feasible in that environment.So ... Are there alternatives to ipset thatEfficiently handle large sets of ip addresses and ip address ranges (i.e., more efficiently than iptables)Can be run in a standard VPS environment.We run CentOS 6 on our VPS, so alternatives that are available for that distribution would be particularly appealing to us.Just to be clear ... We are perfectly happy with the manual process we have in place right now for managing the blocked ip addresses / address ranges.  We're not looking for something to automate that process.  Instead, we're concerned primarily with finding a solution similar to ipset that is good about blocking large sets of addresses/ranges without soaking up a huge amount of CPU time.
What alternatives are there to ipset for blocking large sets of ip addresses / address ranges?
ipset