commit | 773aa356591160ea01a6d44a8c98a32060c74e82 | [log] [tgz] |
---|---|---|
author | Sarup Dalwani <sarup@google.com> | Tue Nov 05 11:22:47 2024 +0000 |
committer | Maciej Żenczykowski <maze@google.com> | Wed Jan 22 16:27:17 2025 -0800 |
tree | 5c010cbf3f63e516cd138d67ad5e4c36daf5532d | |
parent | 26e05d483975f3c6f866e8e4a49ec591c7fbaf56 [diff] |
bpf netd: block local network calls on egress Add method that will perform lookup in trie map and identify if destination for packet is local network. If the packet is for local network, we will drop it. This logic will be paired with permission in future. Test: Locally tested by adding values from userspace and sending packets to same address. Bug: 373608607 Change-Id: If58edf2be717931f160ccbbd86cea35e4463aff4