EBAF – eBPF Based Ad Firewall
github.com
EBAF – eBPF Based Ad Firewall
1–10 of 56 posts
Re: EBAF – eBPF Based Ad Firewall
#2How is this different than other ip or dns ad blockers?
I see that it all comes down to a blacklist of urls. Wouldn’t eBPF just make things more complicated?
Re: EBAF – eBPF Based Ad Firewall
#3How is this different than other ip or dns ad blockers? I see that it all comes down to a blacklist of urls. Wouldn’t eBPF just make things more complicated?
[deleted]
Re: EBAF – eBPF Based Ad Firewall
#4How is this different than other ip or dns ad blockers? I see that it all comes down to a blacklist of urls. Wouldn’t eBPF just make things more complicated?
It's one program that blocks everything everywhere, and doesn't rely on specific firewall configurations or DNS resolvers to be able to block requests.
And because it uses eBPF, technically (it probably doesn't support this yet but it could) you could block requests at the application level, even if it uses TLS, before it ever even gets to a resolver or firewall.
Taking that fact even further, this means that not only well-behaved resolv.conf-reading applications are blocked, but programs that use their own DoH/DoT could be as well. Your browser wouldn't even need an ad-blocker extension. Your local resolver and your VPN-specific resolver both continue to work normally while also blocking what you want.
Re: EBAF – eBPF Based Ad Firewall
#5How is this different than other ip or dns ad blockers? I see that it all comes down to a blacklist of urls. Wouldn’t eBPF just make things more complicated?
It's one program that blocks everything everywhere, and doesn't rely on specific firewall configurations or DNS resolvers to be able to block requests. And because it uses eBPF, technically (it probably doesn't support this yet but it could) you could block requests at the application level, even if it uses TLS, before it ever even gets to a resolver or firewall. Taking that fact even further, this means that not onl…
This is the killer eBPF usecase for the non-engineer user: getting underneath TLS and DoH (which have both been effectively weaponized at this point).
No means no, my computer my choice. sudo build a real product.
Re: EBAF – eBPF Based Ad Firewall
#6How is this different than other ip or dns ad blockers? I see that it all comes down to a blacklist of urls. Wouldn’t eBPF just make things more complicated?
Effectively, not a lot. eBPF does have the capabilities to do more than a regular firewall, but this just seems to do an IP lookup in a blacklist file.
If you buy a fancy network card from a company like Nvidia, you could run the eBPF program on the card itself and the kernel wouldn't even see the packet come in. This use case doesn't seem like it'd need that kind of performance tweak, though.
It's useful as a fun project to experiment with eBPF, though!
Re: EBAF – eBPF Based Ad Firewall
#7> We’re not here to pirate. We’re here to opt out.
Then "opt out" by not using the product? No one has a right to use Spotify. If you don't like the terms, don't use the service.
I'll never get why people smart enough to build something technically impressive like this feel the need to throw these completely childish pseudo-rationalizations out there. Yeah, you are stealing actually.. Is it that big of a deal? Nope. But it still is what it is.
Do they think this kind of false-moralizing will protect them from DMCA takedowns or something?
Re: EBAF – eBPF Based Ad Firewall
#8Not proposing a moral opinion but this is still piracy no matter how much they deny it. The contract with free Spotify is you receive ads.
Re: EBAF – eBPF Based Ad Firewall
#9extend this like pihole so we can use it for reddit and facebook and instagram ad blocking using proxy !
Re: EBAF – eBPF Based Ad Firewall
#10I'm curious about it's eBPF coexistence capabilities. If you are running an XDR like Crowdstrike, this might interfere with their eBPF sensors for Linux desktops.