https://github.com/boratanrikulu/durdur
Lightweight packet filtering for Linux: 'durdur' is a high-performance, eBPF-based simple firewall tool that drops packets by IP or DNS domain. Perfect for on-demand network control.
https://github.com/boratanrikulu/durdur
bpf dns ebpf firewall networking xdp
Last synced: 10 months ago
JSON representation
Lightweight packet filtering for Linux: 'durdur' is a high-performance, eBPF-based simple firewall tool that drops packets by IP or DNS domain. Perfect for on-demand network control.
- Host: GitHub
- URL: https://github.com/boratanrikulu/durdur
- Owner: boratanrikulu
- License: gpl-3.0
- Created: 2022-10-04T14:43:06.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-07-27T23:18:45.000Z (almost 2 years ago)
- Last Synced: 2025-01-23T05:12:56.533Z (over 1 year ago)
- Topics: bpf, dns, ebpf, firewall, networking, xdp
- Language: Go
- Homepage:
- Size: 551 KB
- Stars: 82
- Watchers: 4
- Forks: 1
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Durdur 🐝
[](https://github.com/boratanrikulu/durdur/actions?query=branch%3Amain)
[](https://goreportcard.com/report/github.com/boratanrikulu/durdur)
[](https://codecov.io/gh/boratanrikulu/durdur)
[](https://github.com/boratanrikulu/durdur/blob/main/LICENSE)
[Durdur](https://www.youtube.com/watch?v=sF0QweCoaMo) is a CLI tool for Linux implementing L3/L4 packet dropping with eBPF/Go.
## How to use
Durdur is easy to use with these commands: **`attach`**, **`detach`**, **`drop`**, **`undrop`**, and **`list`**.
All commands should be run with **root privileges**.
### Attach
**`attach`** installs Durdur on the system for a specific interface.
```sh
durdur attach --interface eth0
```
### Detach
**`detach`** uninstalls Durdur from the system.
```sh
durdur detach
```
### Drop and Undrop
**`drop`** and **`undrop`** checks all (ingress) L3 and L4 packets in the system and either block or allow them.
Both commands support the following flags:
- **`src`** for the source address value of an IPv4 packet.
- **`dns`** for the domain value of a DNS packet.
Example usage for **`drop`**;
```sh
durdur drop --src "192.0.1.1"
```
```sh
durdur drop --dns "example.com"
```
Example usage for **`undrop`**;
```sh
durdur undrop --src "192.0.1.1"
```
```sh
durdur undrop --dns "example.com"
```
### List
`list` writes all entires of the maps to the stdout. It has 3 subcommands; `src`, `dns`, and `all`.
Example usage for **`list`**;
```sh
durdur list src
```
```sh
durdur list dns
```
```sh
durdur list all
```
## How to install
### From source;
Build and use `build/durdur` binary.
```
make build
```
### From Docker image;
Build the image.
```sh
make build-docker
```
Run the container with **privileges**.
Example usage;
```sh
docker run --rm -i -t --net="host" --privileged -v /sys/fs/bpf:/sys/fs/bpf durdur -- attach -i eth0
```
```sh
docker run --rm -i -t --net="host" --privileged -v /sys/fs/bpf:/sys/fs/bpf durdur -- drop --dns "example"
```
PS: You don't need to use `--net="host"` if you don't want to access host's interfaces.
## TODO
- [ ] Egress support.
- [ ] Wildcard support to DNS.
- [ ] IPv6 support.
- [ ] Multiple interfaces support.
- [ ] Port support.
## Copyright
[GPL-3.0 license](https://github.com/boratanrikulu/durdur/blob/main/LICENSE),
Copyright 2022-2024 Bora Tanrikulu <[me@bora.sh](mailto:me@bora.sh)>