1bcaddce25e4d13bf65cc77b52d96133aa3416b7
Chain two XDP programs via libxdp dispatcher on the same interface: xdp_blocker (priority 10) handles CIDR/country/whitelist blocking, xdp_ddos (priority 20) handles rate limiting, EWMA analysis, and AI anomaly detection. Whitelist maps are shared via BPF map pinning so whitelisted IPs bypass both blocklist checks and DDoS rate limiting. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Description
XDP-based network defense: CIDR blocker + DDoS detection with time-aware AI
Languages
Python
49.6%
Shell
31.2%
C
16.8%
Makefile
2.4%