We Put an L7 Firewall in the Kernel(yeet.cx) |
We Put an L7 Firewall in the Kernel(yeet.cx) |
> The staged rollout is the honest way to ship something that runs at XDP: each stage widens the traffic it sees, and each stage generates the numbers for the next one.
I see this so often nowadays, with claude trying to be "honest" and all that it really spoils the article for me. Using tools is fine, but at least have a human skim it and remove the really obnoxious and useless parts.
Something like this would have sufficed: "For the moment we're rolling it out in stages, and each stage will inform our next steps".
Nowadays I’d expect them to do AI assisted coding, but the underlying skill set is sound. A shame such good projects delegate blogposts to Claude.
One thing that would be interesting is whether they explored running their automaton in multiple steps, sharing the state across XDP probe invocations, instead of offloading the work to a JS userspace app.