[17:42:51] SFS is slow :( https://performance.wikimedia.org/excimer/profile/70c8903135703a38 [18:13:18] SFS is in prod? [18:13:43] I guess it's in warning/log-only mode or something? [19:44:58] the trace shows IPSet as being slow, I don't think it was designed for such a large IP list [19:51:36] AtEase doesn't help either [19:55:34] the overhead is repeatable, given a wiki with SFS enabled: https://performance.wikimedia.org/excimer/profile/fa071caeb44b3a35 [19:55:44] this is adding 1 link to the testwiki sandbox