3 ms·

How did you use tracing to check the current state of a machine’s iptables rules?

• ValdikSS 9mo ago
  In this case I used `perf` utility, but only because the server does not have a proper observability tool. Take a look at this Netflix presentation, especially on the screenshots of their web interface tool: https://archives.kernel-recipes.org/wp-content/uploads/2025/01/kernelrecipesperfevents-170929090404-171007142608.pdf https://archives.kernel-recipes.org/wp-content/uploads/2025/...
  • crawshaw 9mo ago
    That is a command line tool run over ssh. If you have invented a new way to run command line tools, that’s great (and very possible, writing a service that can fork+exec and map stdio), but it is the equivalent to using ssh. You cannot run commands using traces.
    • charcircuit 9mo ago
      With that mindset anything is equivalent to ssh. The command line is not the pinnacle of user interfaces and giving admins full control of the machine isn't the pinnacle of security either. We need to accept that UNIX did not get things right decades ago and be willing to evolve UX and security to a better place.
      • crawshaw 9mo ago
        Happy to try an alternative. Traces I have tried, and it is not an alternative.