Skip to content

Commit

Permalink
Merge branch 'main' of https://github.com/SamanKhalife/xdf
Browse files Browse the repository at this point in the history
  • Loading branch information
SamanKhalife committed Dec 4, 2024
2 parents e4d52ab + 544de5a commit 35251ec
Show file tree
Hide file tree
Showing 5 changed files with 21 additions and 3 deletions.
13 changes: 13 additions & 0 deletions .github/workflows/getdeps_linux.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@

name: linux

permissions:
contents: read # to fetch code (actions/checkout)

jobs:
build:
runs-on: ubuntu-22.04
steps:

- name: Test x-defender

1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
Ansible
*.c
*.h
*.o
Expand Down
3 changes: 3 additions & 0 deletions .gitmodules
Original file line number Diff line number Diff line change
@@ -1,3 +1,6 @@
[submodule "wirefilter"]
path = wirefilter
url = https://github.com/cloudflare/wirefilter.git
[submodule "xdp-tools"]
path = xdp-tools
url = https://github.com/xdp-project/xdp-tools.git
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

**X-Defender** is an advanced [DDoS mitigation](https://www.cloudflare.com/learning/ddos/ddos-mitigation/#:~:text=DDoS%20mitigation%20refers%20to%20the,%2Dservice%20(DDoS)%20attack.) tool built with [eBPF](https://ebpf.io/) and [XDP](https://www.iovisor.org/technology/xdp). It not only filters and limits malicious traffic in real-time but also takes a proactive and aggressive approach to neutralize threats before they impact your network. Leveraging the power of XDP, X-Defender operates at the lowest level of the Linux networking stack, ensuring high performance and minimal latency while effectively countering even the most sophisticated DDoS attacks.

**Note: This project is in progress, and we are actively working on the code**

# Table of Contents

- [Deep Architecture Overview](https://github.com/SamanKhalife/X-Defender/blob/main/docs/architecture.md)
Expand All @@ -16,12 +16,12 @@
- [Workflow Diagram](https://github.com/SamanKhalife/X-Defender/blob/main/docs/flowchart.md)
- [XDP and eBPF Resources](https://github.com/SamanKhalife/X-Defender/blob/main/docs/resources-xdp-ebpf.md)



<h3 align="center"> X-Defender Network Topology </h3>

![alt text](imgs/X-defnder.png "Network Topology")

> [!CAUTION]
> This project is still in very early stages of development. Use at your own risk. We are looking for contributors to help improve and expand the project.
# Why??
As shown in the Packet Flow in [Packet flow in Netfilter and General Networking](https://upload.wikimedia.org/wikipedia/commons/3/37/Netfilter-packet-flow.svg), XDP operates at the earliest point where packets are handled by the network card. This allows X-Defender to intercept and process packets at this initial stage. By implementing DDoS mitigation at this level, you can protect your system efficiently and cost-effectively while minimizing the load on your system. mostly they use xdp for mitigation and for load balancing like in [cloud flare](https://youtu.be/ZQsbYmdMjnw?t=2685) or many other providers and even [Meta](https://about.meta.com/).
Expand Down
1 change: 1 addition & 0 deletions xdp-tools
Submodule xdp-tools added at cc7a11

0 comments on commit 35251ec

Please sign in to comment.