xdp-filter
XDP-based network packet filtering
TLDR
Load filter on interface
$ sudo xdp-filter load -p allow -m skb [network_interface]
Unload filter$ sudo xdp-filter unload [network_interface]
Deny destination port$ sudo xdp-filter port [destination_port]
Deny source IP$ sudo xdp-filter ip -m src [source_ip]
Deny source MAC$ sudo xdp-filter ether -m src [mac_address]
Show statistics$ sudo xdp-filter poll -i 10000
SYNOPSIS
xdp-filter COMMAND [OPTIONS]
DESCRIPTION
xdp-filter loads and manages eBPF XDP (eXpress Data Path) packet filters. It provides high-performance packet filtering at the network driver level, before packets reach the kernel networking stack.Part of the xdp-tools collection for managing XDP programs.
PARAMETERS
load INTERFACE
Load filter on network interfaceunload INTERFACE
Unload filter from interfaceport PORT
Filter by port numberip ADDRESS
Filter by IP addressether ADDRESS
Filter by MAC addresspoll
Show statistics-p, --policy POLICY
Set default policy (allow/deny)-m, --mode MODE
Filter mode (src/dst for direction, skb/native for XDP mode)-i, --interval MS
Poll interval in milliseconds
INSTALL
sudo apt install xdp-tools
sudo dnf install xdp-tools
sudo pacman -S xdp-tools
sudo apk add xdp-tools
sudo zypper install xdp-tools
nix profile install nixpkgs#xdp-tools
CAVEATS
Requires root privileges. Not all network drivers support native XDP mode. Filters operate at layer 2/3, not application layer.