TLDR Tech / InfoSec
Siper (GitHub Repo)
Siper is a high-performance, XDP-based IP blacklist firewall built with Go and eBPF that drops malicious traffic at the NIC driver level before packets reach the kernel's networking stack. It supports CIDR-based blocking via BPF LPM Trie maps, persistent JSON-based rule management, and real-time drop/pass metrics. The minimalist architecture separates a Go CLI control plane from the kernel-space data plane, offering significantly lower CPU overhead than iptables or nftables under heavy DDoS conditions.
Read the full story