xdp-filter(8) A simple XDP-powered packet filter xdp-filter(8) (NAME) xdp-filter - XDP (SYNOPSIS) XDP-filter XDP . netfilter . XDP (drop rate) : . xdp-filter (Running xdp-filter) xdp-filter : xdp-filter COMMAND [options] Where COMMAND can be one of: load - load xdp-filter on an interface unload - unload xdp-filter from an interface port - add a port to the filter list ip - add an IP address to the filter list ether - add an Ethernet MAC address to the filter list status - show current xdp-filter status poll - poll statistics output help - show the list of available commands . xdp-filter COMMAND --help . LOAD (The LOAD command) xdp-filter . load . . load : xdp-filter load [options] xdp-filter . : -m, --mode XDP . 'native' XDP 'skb' skb ( XDP generic XDP) 'hw' . -p, --policy xdp-filter . allow . deny . xdp-filter deny allow . xdp-filter deny allow . -f, --features xdp-filter . . : o tcp: TCP o udp: UDP o ipv6: IPv6 o ipv4: IPv4 o ethernet: MAC : tcp,udp,ipv6. -v, --verbose . . -h, --help . UNLOAD (The UNLOAD command) unload xdp-filter ( ) . unload : xdp-filter unload [options] xdp-filter --all . : -a, --all xdp-filter . . xdp-filter () XDP . -k, --keep-maps xdp-filter . BPF . ( ) xdp-filter . -v, --verbose . . -h, --help . PORT (The PORT command) port TCP UDP xdp-filter . xdp-filter udp tcp ( ) . port : xdp-filter port [options] ( --remove ). : -r, --remove . -m, --mode . src dst src,dst . src dst . . -p, --proto ( ) udp / tcp UDP TCP . -s, --status . . -v, --verbose . . -h, --help . IP (The IP command) ip IPv6 IPv4 xdp-filter . ip : xdp-filter ip [options] IP ( --remove ). IPv4 IPv6 xdp-filter (ipv4 ipv6 ) . : -r, --remove IP . -m, --mode . src dst src,dst . src IP IP dst IP IP . IP IP . -s, --status IP IP . . -v, --verbose . . -h, --help . ETHER (The ETHER command) ether MAC xdp-filter . xdp-filter ethernet . ether : xdp-filter ether [options] MAC ( --remove ). : -r, --remove MAC . -m, --mode . src dst src,dst . src MAC MAC dst MAC MAC . MAC MAC . -s, --status MAC MAC . . -v, --verbose . . -h, --help . STATUS (The STATUS command) status xdp-filter : . status : xdp-filter status [options] : -v, --verbose . . -h, --help . POLL (The POLL command) poll xdp-filter xdp-filter ( ) . xdp-filter load . poll : xdp-filter poll [options] : -i, --interval . ( ) . -v, --verbose . . -h, --help . (EXAMPLES) 80 eth0 : # xdp-filter load eth0 -f tcp,udp # xdp-filter port 80 IP fc00:dead:cafe::1 ( !): # xdp-filter load eth0 -f ipv6 -p deny # xdp-filter ip fc00:dead:cafe::1 -m src IP fc00:dead:cafe::1 22 ( !): # xdp-filter load eth0 -f ipv6,tcp -p deny # xdp-filter port 22 # xdp-filter ip fc00:dead:cafe::1 -m src (BUGS) : https://github.com/xdp-project/xdp-tools/issues (AUTHORS) xdp-filter Toke Hoiland-Jorgensen Jesper Dangaard Brouer . Toke Hoiland-Jorgensen . V1.6.3 September 5, 2022 xdp-filter(8)