├── .github └── ISSUE_TEMPLATE │ └── bug_report.md ├── .gitignore ├── .gitmodules ├── Makefile ├── README.rst ├── docs ├── ack-thinning.rst ├── block-tcp-8080.rst ├── drop-spoofed-packets.rst ├── ebpf_vs_kernmod.rst ├── gpl_license_ebpf.rst └── localhost-bypass-stack.rst ├── load_tc.sh ├── res ├── bpf-prog-load.png ├── container-context.graphml ├── container-context.png ├── ip-xdp-load.graphml └── ip-xdp-load.png ├── run_as_cgroupv2.sh ├── run_localsock.sh ├── spoof-pkt.py ├── src ├── drop-spoofs-kern.c ├── drop-spoofs-user.c ├── drop-spoofs.h ├── execsnoop-kern.c ├── execsnoop-user.c ├── execsnoop.h ├── local-socket-bypass-kern.c ├── local-socket-bypass-user.c └── xdp-drop-kern.c └── utils ├── cgroup_helpers.c └── cgroup_helpers.h /.github/ISSUE_TEMPLATE/bug_report.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/.github/ISSUE_TEMPLATE/bug_report.md -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | .vscode/* 2 | bin 3 | -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/.gitmodules -------------------------------------------------------------------------------- /Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/Makefile -------------------------------------------------------------------------------- /README.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/README.rst -------------------------------------------------------------------------------- /docs/ack-thinning.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/docs/ack-thinning.rst -------------------------------------------------------------------------------- /docs/block-tcp-8080.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/docs/block-tcp-8080.rst -------------------------------------------------------------------------------- /docs/drop-spoofed-packets.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/docs/drop-spoofed-packets.rst -------------------------------------------------------------------------------- /docs/ebpf_vs_kernmod.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/docs/ebpf_vs_kernmod.rst -------------------------------------------------------------------------------- /docs/gpl_license_ebpf.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/docs/gpl_license_ebpf.rst -------------------------------------------------------------------------------- /docs/localhost-bypass-stack.rst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/docs/localhost-bypass-stack.rst -------------------------------------------------------------------------------- /load_tc.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/load_tc.sh -------------------------------------------------------------------------------- /res/bpf-prog-load.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/res/bpf-prog-load.png -------------------------------------------------------------------------------- /res/container-context.graphml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/res/container-context.graphml -------------------------------------------------------------------------------- /res/container-context.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/res/container-context.png -------------------------------------------------------------------------------- /res/ip-xdp-load.graphml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/res/ip-xdp-load.graphml -------------------------------------------------------------------------------- /res/ip-xdp-load.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/res/ip-xdp-load.png -------------------------------------------------------------------------------- /run_as_cgroupv2.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/run_as_cgroupv2.sh -------------------------------------------------------------------------------- /run_localsock.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/run_localsock.sh -------------------------------------------------------------------------------- /spoof-pkt.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/spoof-pkt.py -------------------------------------------------------------------------------- /src/drop-spoofs-kern.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/src/drop-spoofs-kern.c -------------------------------------------------------------------------------- /src/drop-spoofs-user.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/src/drop-spoofs-user.c -------------------------------------------------------------------------------- /src/drop-spoofs.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/src/drop-spoofs.h -------------------------------------------------------------------------------- /src/execsnoop-kern.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/src/execsnoop-kern.c -------------------------------------------------------------------------------- /src/execsnoop-user.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/src/execsnoop-user.c -------------------------------------------------------------------------------- /src/execsnoop.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/src/execsnoop.h -------------------------------------------------------------------------------- /src/local-socket-bypass-kern.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/src/local-socket-bypass-kern.c -------------------------------------------------------------------------------- /src/local-socket-bypass-user.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/src/local-socket-bypass-user.c -------------------------------------------------------------------------------- /src/xdp-drop-kern.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/src/xdp-drop-kern.c -------------------------------------------------------------------------------- /utils/cgroup_helpers.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/utils/cgroup_helpers.c -------------------------------------------------------------------------------- /utils/cgroup_helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nyrahul/ebpf-guide/HEAD/utils/cgroup_helpers.h --------------------------------------------------------------------------------