We Put an L7 Firewall in the Kernel(yeet.cx)
yeet.cx
We Put an L7 Firewall in the Kernel
https://yeet.cx/blog/l7-firewall-in-the-kernel
11 comments
You didnt put anything anywhere you just vibe slopped XDP code the same way you vibe slopped your blog post
I’ve followed yeet from the inception phase (the creator luks in the Aya Discord, a library to write eBPF using Rust). They’re very skilled, and the project started a few years ago well before LLM coding was up to par for such code.
Nowadays I’d expect them to do AI assisted coding, but the underlying skill set is sound. A shame such good projects delegate blogposts to Claude.
One thing that would be interesting is whether they explored running their automaton in multiple steps, sharing the state across XDP probe invocations, instead of offloading the work to a JS userspace app.
Nowadays I’d expect them to do AI assisted coding, but the underlying skill set is sound. A shame such good projects delegate blogposts to Claude.
One thing that would be interesting is whether they explored running their automaton in multiple steps, sharing the state across XDP probe invocations, instead of offloading the work to a JS userspace app.
It's fun to see how people end up using eBPF, but it feels like this was an LLM generated post (my apologies if I'm mistaken). It doesn't feel as fun reading a post generated by an LLM - it often feels more long winded, many short sentences and over use of certain phrases.
[deleted]
The article is a L7 weenie.
I thought layer 7 is the user, a.k.a. PEBKAC
Nah, that's layer 8
https://en.wikipedia.org/wiki/Layer_8
https://en.wikipedia.org/wiki/Layer_8
Problem exists between organization and application
So disappointed to learn that Americans don't know the game is called Snakes and Ladders, and that their version is all about morality lessons.
We need a [slop] flag.
> The staged rollout is the honest way to ship something that runs at XDP: each stage widens the traffic it sees, and each stage generates the numbers for the next one.
I see this so often nowadays, with claude trying to be "honest" and all that it really spoils the article for me. Using tools is fine, but at least have a human skim it and remove the really obnoxious and useless parts.
Something like this would have sufficed: "For the moment we're rolling it out in stages, and each stage will inform our next steps".