BPF port-based firewall for systemd services
Maybe someone can enlighten me because I&#x27;m failing to see the relevance of SystemD here.<p>So the idea is, instead of having a central firewall managing all the host rules, each service define it&#x27;s own firewall policy ? How do I override a policy ?<p>I maybe missing something but somehow I&#x27;m not sure it&#x27;s the right place to do this.<p>I&#x27;ll end up joining the camp of SystemD does too much and breaks a lot of POSIX semantics making Linux systems hard to debug.<p>Lately it&#x27;s been getting more and more in my way. Things that I have problems with lately, DNS, cgroup and namespace. Every time I&#x27;ve lost a considerable amount of time because of poorly documented and mostly unexpected SystemD behavior.
Color me annoyed.<p>Edit: Hum, well, wasn&#x27;t supposed to but it end up into a rant