3 ms·
Is there a good way to go from an OpenAPI / Swagger schema to WAF rules; and then to verify that the rules don't collide? IIUC eBPF does part of this
by westurner 1y ago
Is there a good way to go from an OpenAPI / Swagger schema to WAF rules; and then to verify that the rules don't collide? IIUC eBPF does part of this
- westurner 1y agoRe: eBPF WAF awesome-ebpf > Kernel docs, examples, "eBPF/XDP hardware offload to SmartNICs", Go libraries: https://github.com/zoidyzoidzoid/awesome-ebpf#go-libraries https://github.com/zoidyzoidzoid/awesome-ebpf#go-libraries /? ebpf waf site:github.com https://www.google.com/search?q=+ebpf+waf+site%3Agithub.com https://www.google.com/search?q=+ebpf+waf+site%3Agithub.com harporoeder/ebpfsnitch: "Linux Application Level Firewall based on eBPF and NFQUEUE" https://github.com/harporoeder/ebpfsnitch https://github.com/harporoeder/ebpfsnitch ebpf-security/ebpf-https: "eBPF-https is an open source web application firewall (WAF)" https://github.com/ebpf-security/ebpf-https https://github.com/ebpf-security/ebpf-https cilium/cilium: https://github.com/cilium/cilium https://github.com/cilium/cilium : > Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span multiple clusters in either a native routing or overlay mode. It is L7-protocol aware and can enforce network policies on L3-L7 using an identity based security model that is decoupled from network addressing.