We Put an L7 Firewall in the Kernel

https://yeet.cx/blog/l7-firewall-in-the-kernel

by ok_major_9889 • 13 days ago

46 10 13 days ago

I try to get past the claudisms if the subject is interesting, in the hopes of learning something new, and this article had many such claudisms throughout, but it was an interesting read nonetheless. It could have been much shorter, but hey... The exception to acceptable signal to claudisms level for me was one of the later paragraphs:

The staged rollout is the honest way to ship something that runs at XDP: each stage widens the traffic it sees, and each stage generates the numbers for the next one.

I see this so often nowadays, with claude trying to be "honest" and all that it really spoils the article for me. Using tools is fine, but at least have a human skim it and remove the really obnoxious and useless parts.

Something like this would have sufficed: "For the moment we're rolling it out in stages, and each stage will inform our next steps".

a3w• 10 days ago

I thought layer 7 is the user, a.k.a. PEBKAC

falcor84• 10 days ago

Nah, that's layer 8

https://en.wikipedia.org/wiki/Layer_8

dodslaser• 10 days ago

Problem exists between organization and application

alexdns• 10 days ago

You didnt put anything anywhere you just vibe slopped XDP code the same way you vibe slopped your blog post

tuetuopay• 10 days ago

I’ve followed yeet from the inception phase (the creator luks in the Aya Discord, a library to write eBPF using Rust). They’re very skilled, and the project started a few years ago well before LLM coding was up to par for such code.

Nowadays I’d expect them to do AI assisted coding, but the underlying skill set is sound. A shame such good projects delegate blogposts to Claude.

One thing that would be interesting is whether they explored running their automaton in multiple steps, sharing the state across XDP probe invocations, instead of offloading the work to a JS userspace app.

Trev123• 10 days ago

It's fun to see how people end up using eBPF, but it feels like this was an LLM generated post (my apologies if I'm mistaken). It doesn't feel as fun reading a post generated by an LLM - it often feels more long winded, many short sentences and over use of certain phrases.

crest• 10 days ago

We need a [slop] flag.

angry_octet• 10 days ago

So disappointed to learn that Americans don't know the game is called Snakes and Ladders, and that their version is all about morality lessons.

zeroonetwothree• 10 days ago

The article is a L7 weenie.

We Put an L7 Firewall in the Kernel

Related Stories