daeuniverse / dae

eBPF-based Linux high-performance transparent proxy solution.
GNU Affero General Public License v3.0
3.16k stars 194 forks source link

Dont add non-direct ip to ebpf rules #132

Open ZhiShengYuan opened 1 year ago

ZhiShengYuan commented 1 year ago

Dont add non-direct ip to ebpf rules

piyoki commented 1 year ago

Please provide more context such as the use cases.

ZhiShengYuan commented 1 year ago

Please provide more context such as the use cases.

A very obvious example is the situation where, for instance, American IPs go through American proxies, British IPs go through British proxies, and Japanese IPs go through Japanese proxies. These IPs clearly do not need, nor can they be routed within eBPF; instead, routing them takes place within the application itself. Within eBPF, the only IPs that are useful are those that do not need to pass through the application.

ZhiShengYuan commented 1 year ago

Please provide more context such as the use cases.

Otherwise, we can observe an extremely ironic phenomenon: although there are tens of thousands of rules within eBPF, their effectiveness is equivalent to only a few thousand.