← All projects
Kernel-Level Endpoint Security
In-kernel packet classification and per-process network access control via eBPF/XDP.
- C
- eBPF
- XDP
- BPF-LSM
A self-initiated, ongoing project writing eBPF programs at the XDP hook for line-rate in-kernel packet classification, and BPF-LSM hooks for per-process network access control that resists root bypass. Includes a telemetry pipeline streaming events from the eBPF programs to a userspace daemon through shared-memory ring buffers.
Private repository / in progress