XDP Firewall is a stateless firewall that uses eBPF and attaches to the Linux kernel’s XDP hook for high-performance packet filtering. Processing traffic before it passes through much of the networking stack can reduce latency and resource consumption.
The firewall supports configurable rules for IPv4 and IPv6 traffic, source-address blocking, CIDR range dropping and rate limiting. Rules can match TCP, UDP and ICMP traffic using criteria including addresses, ports, packet lengths, TTL values and TCP flags.
Runtime configuration and command-line utilities allow administrators to manage rules without restarting the firewall. Packet counters and optional logging provide visibility into allowed, dropped and passed traffic.
This is free and open source software.
Key Features
- Attaches eBPF programs to the Linux kernel’s XDP hook.
- Filters IPv4 and IPv6 traffic.
- Supports TCP, UDP and ICMP filtering rules.
- Matches traffic by addresses, ports, CIDR ranges, TTL values, packet sizes and TCP flags.
- Provides source IP and flow-based rate limiting.
- Temporarily blocks source addresses that match configured rules.
- Drops individual addresses or entire IP ranges.
- Uses pinned BPF maps for dynamic rule management.
- Includes command-line tools for adding and removing rules.
- Displays real-time allowed, dropped and passed packet counters.
- Offers configurable terminal and file logging.
- Supports native, generic and hardware-offload XDP attachment modes.
- Allows features to be enabled or disabled at build time.
- Reloads runtime configuration at a configurable interval.
Website: github.com/gamemann/XDP-Firewall
Support:
Developer: Christian Deacon
License: MIT License
XDP Firewall is written in C. Learn C with our recommended free books and free tutorials.
Related Software
| Firewalls | |
|---|---|
| OpenSnitch | Interactive application firewall |
| nftables | Provides a new in-kernel packet classification framework |
| Firewalld | Dynamically managed firewall with support for network/firewall zones |
| ufw | Uncomplicated Firewall. This is software for managing a netfilter firewall |
| Portmaster | Application firewall that does the heavy lifting |
| iptables | Configure the Linux 2.4.x and later packet filtering ruleset |
| Shorewall | High-level tool for configuring Netfilter |
| gufw | Easy, intuitive, way to manage your Linux firewall |
| XDP-Firewall | Stateless firewall tool |
| Vuurmuur | Uncomplicated Firewall, manage a netfilter firewall |
| awall | Firewall configuration tool, providing various benefits over plain iptables |
| Foomuuri | Multizone bidirectional nftables firewall |
| bgpipe | BGP reverse proxy and firewall |
| FirewallFabrik | Graphical firewall policy management tool |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.