LilyFirewall

Linux firewall powered by eBPF and XDP

Requirements

• Go 1.23+
• Linux Kernel 6.6+

Support feature

• IPv4
• IPv6
• TCP
• UDP

Usage

make
# change lo if you need
sudo ./LilyFirewall lo

API

Get all rules

GET /api/v1/rules

Add rule

POST /api/v1/rule

{
    "SrcAddr": "127.0.0.1",
    "DstPort": 8000,
    "Proto": 6
}

Proto 6 is TCP

{
    "SrcAddr": "127.0.0.1",
    "DstPort": 8000,
    "Proto": 17
}

Proto 17 is UDP

Get rule

GET /api/v1/rule

{
    "SrcAddr": "127.0.0.1",
    "DstPort": 8000,
    "Proto": 6
}

Delete rule

DELETE /api/v1/rule

{
  "SrcAddr": "127.0.0.1",
  "DstPort": 8000,
  "Proto": 6
}

Reference

EtherType

IPv4

IPv6

IP protocol numbers

TCP

UDP