---
title: "Sizing Guidelines for Trinzic Appliances"
canonical: "https://docs.infoblox.com/space/BloxOneThreatDefense/35434905/Sizing%20Guidelines%20for%20Trinzic%20Appliances"
format: markdown
---
> ℹ️ All sizing guideline information is for reference only. It represents the results of lab testing in a controlled environment focused on individual protocol services. Enabling additional protocols, services, cache hit ratio for recursive DNS, and customer environment variables will affect performance. To design and size a solution for a production environment, please contact your Infoblox Solution Architect.


Infoblox Trinzic appliances have the following limitations on the number of threat intelligence entries that can be loaded on to each appliance. These recommended per-appliance limitations help achieve acceptable performance and should not be exceeded. To help you prioritize and select threat feeds in the DNS FW configuration, use the entry counts next to the feed in the NIOS setup, and use the following guidelines:

| ## **RPZ (Threat Intelligence) Sizing Limitations for Trinzic Appliances (9.0.7 and later)** |
| --- |
| ### **Appliance** | **RPZ Only** | **RPZ + Threat Insight** |
| 815 | 6M | Not Supported |
| 825 | 6M | Not Supported |
| 1415 | 12M | Not Supported |
| 1425 | 12M | Not Supported |
| 2215/2225 | 40M | 20M |
| 4015/4025 | 60M | 35M |
| 926 | 16M | Not Supported |
| 1516/1526 | 40M | 15M |
| 2326/4126 | 60M | 35M |


|  |
| --- |
| ## **RPZ (Threat Intelligence) Sizing Limitations for Trinzic Appliances (pre-9.0.7)** |
| **Appliance** | **Maximum Supported RPZ Record Count in Millions** |
| IB-815 | 1.5 |
| IB-825 | 2 |
| IB-926 | 6 |
| IB-1415 | 6 |
| IB-1425 | 8 |
| IB-1516 | 20 |
| IB-1526 | 20 |
| IB-2215 | 25 |
| IB-2225 | 25 |
| IB-2326 | 40 |
| IB-4015 | 40 |
| IB-4025 | 40 |
| IB-4126 | 40 |


> ℹ️ **Feed Restrictions**
> ℹ️ 
> ℹ️ - Very Low end models (1.5M/2M) - Get some policy protection
> ℹ️ - Low end models (6M-12M) – Get Base (confirmed malicious) and Policy protection.
> ℹ️ - Mid-Level models (16M-20M) - Beyond Base & Policy feeds, they also get the high risk part of unconfirmed indicators (Suspicious).
> ℹ️ - High end models (40M) – Gets all the feeds.
> ℹ️ - IB-1415 and IB-1425 are unsupported on NIOS 9.0.5 and later when using Threat Insight and Threat Defense RPZ feeds.


|  |
| --- |
| ## <span style="color: #242424">**Maximum RPZ Size by Feed**</span> |
| **Feed** | **RPZ** | **For Maximum of 1.5M/2M Records** | **For Maximum of  6M-12M Records** | **For Maximum of  16M-20M Records** | **For Maximum of  40M Records** |
| Infoblox Base | <span style="color: #000000">infoblox-base.rpz.infoblox.local</span> |  | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Infoblox Base IP</span> | <span style="color: #000000">infoblox-base-ip.rpz.infoblox.local</span> |  | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Infoblox High Risk</span> | <span style="color: #000000">infoblox-high-risk.rpz.infoblox.local</span> |  |  | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Infoblox Medium Risk</span> | <span style="color: #000000">infoblox-med-risk.rpz.infoblox.local</span> |  |  |  | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Infoblox Low Risk</span> | <span style="color: #000000">infoblox-low-risk.rpz.infoblox.local</span> |  |  |  | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Infoblox Infomational</span> | <span style="color: #000000">infoblox-informational.rpz.infoblox.local</span> |  |  | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| DoH Public Hostnames | <span style="color: #000000">public-doh.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| DoH Public IPs | <span style="color: #000000">public-doh-ip.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Cryptocurrency hostnames and domains</span> | <span style="color: #000000">cryptocurrency.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">DHS_AIS_ Hostname</span> | <span style="color: #000000">dhs-ais-domain.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">DHS_AIS_IP</span> | <span style="color: #000000">dhs-ais-ip.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Bogon</span> | <span style="color: #000000">bogon.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">EECN IPs</span> | <span style="color: #000000">eecn-ip.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">US OFAC Sanctions IPs</span> | <span style="color: #000000">sanctions-ip.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Sanctions Med</span> | <span style="color: #000000">sanctions-med.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Sanctions High</span> | <span style="color: #000000">sanctions-high.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">TOR Exit Node IPs</span> | <span style="color: #000000">tor-exit-node-ip.rpz.infoblox.local</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |
| <span style="color: #000000">Farsight Newly Observed Domains (NOD)</span> | <span style="color: #000000">farsightnod.rpz.infoblox.local</span> |  |  | ### <span style="color: #008080">**✔**</span> | ### <span style="color: #008080">**✔**</span> |

For guidelines on the sizing of the old RPZ feeds, see *[Sizng Guidelines for the Old RPZ Feeds](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneThreatDefense/pages/639993626)**. *