fix: refactor to use eBPF over iptables for better routing control#249

Merged

schmitthub merged 32 commits intomainfrom

fix/project-egress-priority

Apr 11, 2026

Commits on Apr 9, 2026

fix: prioritize local project's TCP/SSH rules in per-container iptables ordering

schmitthub
and
claude
committed
fixes. doc updates. package rename
schmitthub
committed
feat: replace iptables with eBPF cgroup programs for per-container traffic routing

schmitthub
and
claude
committed
chore: remove stale BPF source files superseded by consolidated clawker.c

schmitthub
and
claude
committed
fix: resolve eBPF byte order bug, add SO_MARK loop prevention, firewall lifecycle fixes

schmitthub
and
claude
committed
chore: stragglers
schmitthub
committed
feat: add CoreDNS dns-to-bpf plugin (internal/dnsbpf)

schmitthub
and
claude
committed
feat: add custom CoreDNS image build with embedded dnsbpf plugin

schmitthub
and
claude
committed
feat: integrate custom CoreDNS with dnsbpf plugin into firewall manager

schmitthub
and
claude
committed
fix: global route_map, connect6 IPv4-mapped routing, sync-routes

schmitthub
and
claude
committed

Commits on Apr 11, 2026