What are the fastest methods to create WAF malicious database?

I'm working on developing a WAF using python, and i have some malicious payloads that the WAF will block, but the data is huge and i don't know much about big data and this stuff, what is the effection way to store the huge amount of this payloads so that the program could easily search in it without huge delay? and show i use database or files to store such data?