Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

EBAF – eBPF Based Ad Firewall

github.com

Post reply on HN
Print view View original

51–56 of 56 posts

Re: EBAF – eBPF Based Ad Firewall

#51

Post by jeroenhd »

blipvert wrote: post #18
jeroenhd wrote: post #6

Earlier quoted context omitted.

Effectively, not a lot. eBPF does have the capabilities to do more than a regular firewall, but this just seems to do an IP lookup in a blacklist file. If you buy a fancy network card from a company like Nvidia, you could run the eBPF program on the card itself and the kernel wouldn't even see the packet come in. This use case doesn't seem like it'd need that kind of performance tweak, though. It's useful as a fun pr…

Do you have a model number for an Nvidia offload card? I thought that only Netronome did them and that they were kinda long in the tooth now. I’d love to get my hands on one.

The trick for anything Nvidia and networking related, of course, is to search for "Mellanox", the network card manufacturer they bought.

This forum post suggests the ConnextX-6 might work: https://forums.developer.nvidia.com/t/connectx-6-dx-crypto-a...

However, details are very hard to come by. Maybe the "offload" they offer isn't actually offloading anything and I've just misunderstood them when I last heard about them (and kernel XDP really is that fast).

Re: EBAF – eBPF Based Ad Firewall

#52

Post by therein »

immibis wrote: post #48
therein wrote: post #30

Earlier quoted context omitted.

>once it's in my network, i can do whatever i please with it. But that literally applies to any online licensing check flow. And extends to binaries that are on your disk. I can patch that conditional jump, it is on my hard drive.

Correct on all counts. Capitalism is about everyone doing everything they can to improve their own personal situation. If you let companies do everything they can to improve their situation, while you also do everything you can to improve companies' situations, you're not doing very well at capitalism.

Yeah, I am entirely with you in principle.

Re: EBAF – eBPF Based Ad Firewall

#54

Post by pogue »

woleium wrote: post #53
pogue wrote: post #50

Earlier quoted context omitted.

Tfa?

The Fine/F**ing Article. Its an old slashdot acronym

Do you mean the github project linked in this post? I'm looking for a hosts based Spotify blocklist that would work on Windows HOSTS or a Pi-hole or something like that.

Re: EBAF – eBPF Based Ad Firewall

#55

Post by blipvert »

jeroenhd wrote: post #51
blipvert wrote: post #18

Earlier quoted context omitted.

Do you have a model number for an Nvidia offload card? I thought that only Netronome did them and that they were kinda long in the tooth now. I’d love to get my hands on one.

The trick for anything Nvidia and networking related, of course, is to search for "Mellanox", the network card manufacturer they bought. This forum post suggests the ConnextX-6 might work: https://forums.developer.nvidia.com/t/connectx-6-dx-crypto-a... However, details are very hard to come by. Maybe the "offload" they offer isn't actually offloading anything and I've just misunderstood them when I last heard about t…

Ah,yes, that makes sense. I’ll have a read around then - thanks.

But, yeah, driver mode seems plenty fast enough and unless traffic goes up over 10x we’re fine for now.

Always good to have a plan, though …

Re: EBAF – eBPF Based Ad Firewall

#56

Post by mfro »

pogue wrote: post #54
woleium wrote: post #53

Earlier quoted context omitted.

The Fine/F**ing Article. Its an old slashdot acronym

Do you mean the github project linked in this post? I'm looking for a hosts based Spotify blocklist that would work on Windows HOSTS or a Pi-hole or something like that.

Someone commented in this thread a few days ago (deleted now) that DNS blocklists do not work on Spotify anymore for whatever reason. I would guess your best option might be spotify on web with ublock origin (but I haven't tried it).
Post reply on HN