xdp-filter

Load filter on interface

$ sudo xdp-filter load -p allow -m skb [network_interface]

$ sudo xdp-filter unload [network_interface]

$ sudo xdp-filter port [destination_port]

$ sudo xdp-filter ip -m src [source_ip]

$ sudo xdp-filter ether -m src [mac_address]

$ sudo xdp-filter poll -i 10000

xdp-filter COMMAND [OPTIONS]

xdp-filter loads and manages eBPF XDP (eXpress Data Path) packet filters. It provides high-performance packet filtering at the network driver level, before packets reach the kernel networking stack.
Part of the xdp-tools collection for managing XDP programs.

load INTERFACE

Load filter on network interface

Unload filter from interface

Filter by port number

Filter by IP address

Filter by MAC address

Show statistics

Set default policy (allow/deny)

Filter mode (src/dst for direction, skb/native for XDP mode)

Poll interval in milliseconds

Requires root privileges. Not all network drivers support native XDP mode. Filters operate at layer 2/3, not application layer.

iptables(8), nftables(8), tc(8)