Verified on real kernel 5.15.0-186 (VDS, netns+veth, generic XDP): - verifier accepts program, all maps created (BTF ok) - legit TCP passes end-to-end; conntrack entry cleaned on close - stats counters increment correctly; prefix_stats /24 key populated - LPM blacklist ban blocks traffic with retransmit drops |
||
|---|---|---|
| .. | ||
| common.h | ||
| config.h | ||
| maps.h | ||
| prefix_stats.h | ||
| stats.h | ||
| syn_challenge.h | ||
| universal_filter.c | ||