something like https://github.com/renanqts/xdpdropper https://github.com/renanqts/xdpdropper or cilium's host firewall or https://github.com/boylegu/TyrShield h

something like https://github.com/renanqts/xdpdropper https://github.com/renanqts/xdpdropper or cilium's host firewall or https://github.com/boylegu/TyrShield https://github.com/boylegu/TyrShield exist or https://github.com/ebpf-security/xdp-firewall https://github.com/ebpf-security/xdp-firewall today and implement ebpf filter based firewalling. Of these there is a sample integration for XDPDropper to fail2ban that never got merged https://github.com/fail2ban/fail2ban/pull/3555/files https://github.com/fail2ban/fail2ban/pull/3555/files -- I don't think anyone else has really worked on that junction of functionality yet. There's also wazuh which seems to package ebpf tooling up with a ton of detection and management components, but its not a simple to deploy as fail2ban.