Accurate, low-overhead per process bandwidth monitoring in 40 lines of bpftrace

Re:Accurate, low-overhead per process bandwidth monitoring i... by tkinom on Thursday April 15, 2021 @11:28AM (#26821629)

After I see app's bandwidth usage, if I want to block that app's traffic, what's the best way to do that?

[ Parent | on HN ]

Re:Accurate, low-overhead per process bandwidth monitoring i... by effie on Thursday April 15, 2021 @11:55AM (#26822043)

You have to run the app with dedicated UID, then

    iptables -I OUTPUT -m owner --uid-owner <UID> -j DROP
    ip6tables -I OUTPUT -m owner --uid-owner <UID> -j DROP

[ Parent | on HN ]

Re:Accurate, low-overhead per process bandwidth monitoring i... by mircea on Thursday April 15, 2021 @08:29PM (#26827877)

Run the app in a separate netns and then you can create iptables/netfilter rules that match on that netns.

[ Parent | on HN ]