Earlier quoted context omitted.
What's the simplest way to implement eBPF filtering? As in a NFTables/Fail2Ban level usability.
https://bpfilter.io/ https://github.com/facebook/bpfilter https://lwn.net/Articles/1017705/
Thank you!
Implementing fast TCP fingerprinting with eBPF
41–42 of 42 posts
Re: Implementing fast TCP fingerprinting with eBPF
#42More useless and harmful anti-bot nonsense, probably with many false detections, when a simple and neutral rate-limiting 429 does the job.
There are MANY cases for such an implementation. My service [1] implements such a thing, eBPF too, and my users do it for many valid reasons such as: - shopping cart fraud - geo-restricted content (think distributing laws) - preventing abuse (think ticket scalpers) - preventing cheating and multi-accounting (think gaming) - preventing account takeovers (think 2FA trigger if fingerprint suddenly changed) There is much…
Why do you need eBPF for it? Why is IP filtering and header/cookie analysis not enough? What is shopping cart fraud? What is your false positive and false negative rate?