I'm interested in learning eBPF and using that to firewall in Proxmox. Is this rabbit hole possible? I'm only planning VMs. AI suggests CTs would be a problem.
Can I Use eBPF to Firewall?
- Thread starter Stereoscope
- Start date
On a Proxmox VE to use eBPF to filter network traffic, it would be totally independent from Proxmox VE configuration interface as this uses iptables or nftables. So all rules would be required to get created somewhere outside. In addition, there would be the need to write some own programs in C (libbpf) or Rust (aya) as there is no frontend available yet on Debian. Meaning: No declarative rule interface, there's no equivalent of write rules in a config file and a daemon applies them.
Is this really, what you want?
Is this really, what you want?