Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

XDPDropper action #3555

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

XDPDropper action #3555

wants to merge 1 commit into from

Conversation

AlphaJack
Copy link

Before submitting your PR, please review the following checklist:

  • CHOOSE CORRECT BRANCH: if filing a bugfix/enhancement
    against certain release version, choose 0.9, 0.10 or 0.11 branch,
    for dev-edition use master branch
  • CONSIDER adding a unit test if your PR resolves an issue
  • LIST ISSUES this PR resolves
  • MAKE SURE this PR doesn't break existing tests
  • KEEP PR small so it could be easily reviewed.
  • AVOID making unnecessary stylistic changes in unrelated code
  • ACCOMPANY each new failregex for filter X with sample log lines
    within fail2ban/tests/files/logs/X file

XDPDropper action

Adding a new action that allows to ban clients via eBPF XDP, resulting in more efficient packet dropping.
Ideally, this would be better than nftables ingress hook in case of DDOS attacks.

This action requires a configured instance of XDPDropper. For Arch Linux users, I created an easy to install package in the AUR, that should be trivial to adapt to other distros.

References:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants