SailFirewall

Linux firewall powered by eBPF and XDP

Requirements

• Go 1.16+
• Linux Kernel 4.15+

Support feature

• IPv4
• IPv6
• TCP
• UDP

Please contribute other protocols support

Usage

make
# change lo if you need
sudo ./SailFirewall -iface lo

API

Add rule

POST /api/v1/rule

{
    "SrcAddr": "127.0.0.1",
    "DstPort": 8000,
    "Proto": 6
}

Proto 6 is TCP

{
    "SrcAddr": "127.0.0.1",
    "DstPort": 8000,
    "Proto": 17
}

Proto 17 is UDP

Get rule

GET /api/v1/rule

{
    "SrcAddr": "127.0.0.1",
    "DstPort": 8000,
    "Proto": 6
}

Delete rule

DELETE /api/v1/rule

{
  "SrcAddr": "127.0.0.1",
  "DstPort": 8000,
  "Proto": 6
}

Reference

EtherType

IPv4

IPv6

IP protocol numbers

TCP

UDP