Hacker GitHub

← All repos

harporoeder/ebpfsnitch

View on GitHub ↗ ★ 707 C++

Linux Application Level Firewall based on eBPF and NFQUEUE.

5 mentions on Hacker News by 5 people: 1 story, 4 comments · first 2021-03-14 · latest 2025-10-30

Mentions per year 5 mentions · busiest year 2021 (2)
20082026
AllStoriesComments NewestTopOldest
  1. …harporoeder/ebpfsnitch: "Linux Application Level Firewall based on eBPF and NFQUEUE" https://github.com/harporoeder/ebpfsnitch ebpf-security/ebpf-https: "eBPF-https is an open source web application firewall (WAF)"…
    comment by westurner · 2025-10-30 · in Why We're Beating Modsecurity
  2. …is also eBPFSnitch, though it hasn't been updated in a while. It uses eBPF for packet filtering. https://github.com/harporoeder/ebpfsnitch
    comment by lapser · 2022-06-25 · in OpenSnitch is a GNU/Linux port of the Little Snitch application firewall
  3. …(so bpftrace-based/bcc-based tools), I've recently discovered that there there are: 1. ebpfsnitch ( https://github.com/harporoeder/ebpfsnitch ): which is an application-level firewall without kernel modules. 2. ebpf-traffic-monitor (…
    comment by pwnna · 2022-01-02 · in Notes on BPF and eBPF
  4. There is a sort of opensnitch based on ebpf but not sure is fully feature completed as you intended: https://github.com/harporoeder/ebpfsnitch
    comment by n3mes1s · 2021-05-20 · in Landlock merged in mainline for Linux 5.13
  5. ▲ 290
    EBPFSnitch: An eBPF based Linux Application Firewall
    story by harporoeder · 2021-03-14 · 70 comments