mirror of
https://github.com/xdp-project/bpf-examples.git
synced 2024-05-06 15:54:53 +00:00
Vincent Li
d4450991a2
User could build xdp-synproxy container and runs in kubernetes as daemonset to protect kubernetes node from SYN flood attack Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
19 lines
576 B
Docker
19 lines
576 B
Docker
#docker build . -t xdp-synproxy:0.1
|
|
#docker run -it -h xdp-synproxy --network=host --privileged xdp-synproxy:0.1
|
|
|
|
FROM ubuntu:latest
|
|
|
|
RUN apt-get update && \
|
|
apt-get install -y libelf1 \
|
|
iptables \
|
|
iproute2
|
|
|
|
COPY bpftool /usr/local/bin
|
|
COPY install-rules.sh /
|
|
COPY uninstall-rules.sh /
|
|
COPY xdp_synproxy /usr/local/bin
|
|
|
|
#ENTRYPOINT ["/usr/local/bin/xdp_synproxy", "--iface", "ens192", "--file", "/usr/local/bin/xdp_synproxy_kern.o", "--mss4", "1460", "--mss6", "1440", "--wscale", "7", "--ttl", "254", "--ports", "80,8080"]
|
|
|
|
|