News for hackers. Stuff that matters.
Re:Abusing Linux's firewall: the hack that allowed us to bui... by jrochkind1 on Thursday April 12, 2018 @07:18PM (#16825818)
Sounds like cloudflare might want to start trying to submit some nftables TPROXY support now, so it's there in the vanilla kernel when they end up needing it. :)
Re:Abusing Linux's firewall: the hack that allowed us to bui... by RandomBK on Thursday April 12, 2018 @09:39PM (#16826505)
It'd expect someone to eventually submit such a patch, though I don't know how urgent this issue is. Iptables isn't going anywhere anytime soon, so Cloudflare can continue to use this method on the edge nodes.