nikofil / ebpf-firewall Goto Github PK

Hi,
Its a very simple and good example to exhibit usage of ingress/egress hooks at SKB level. BPF Programs(ingress/egress) and maps are properly loaded and pinned. But when I block 8.8.8.8 and ping it I don't see it working(sudo ./ebpf-fw show). For some reason ebpf hooks are not invoked on my setup. Could you give any pointers how to debug my setup.

Thanks,
-jeelani

Kernel Version

ubuntu@ubuntu-sase:~/ebpf-firewall$ sudo uname -a
Linux ubuntu-sase 5.13.0-27-generic #29-Ubuntu SMP Wed Jan 12 17:36:47 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux

Loaded BPF programs

18: cgroup_skb name ingress tag 3f2620ff38c65d19 gpl
loaded_at 2022-02-17T15:21:49+0530 uid 0
xlated 376B jited 212B memlock 4096B map_ids 4,3
19: cgroup_skb name egress tag e9cc64cc2fd374a7 gpl
loaded_at 2022-02-17T15:21:49+0530 uid 0
xlated 376B jited 215B memlock 4096B map_ids 4,3

Loaded BPF maps

3: queue name flows_map flags 0x0
key 0B value 12B max_entries 10000 memlock 163840B
4: hash name blocked_map flags 0x0
key 4B value 4B max_entries 10000 memlock 81920B

ubuntu@ubuntu-sase:~/ebpf-firewall$ sudo bpftool map dump id 4
key: 08 08 08 08 value: 08 08 08 08
Found 1 element

enable ipv6 support?