- domain entries covered by domain_suffix are removed
- domain/suffix entries covered by domain_keyword are removed
- child suffixes covered by parent suffix are removed
- adjacent/contained CIDRs are merged into larger blocks
- Available via --optimize/-O flag on merge and generate commands
- cn-direct: 634 -> 587 rules (-7.4%)