To "block" banned IPs in userspace, the TCP connection must be established *first*, wasting time and resources. It would be better to use a eBPF script, possibly via [RedBPF](https://github.com/foniod/redbpf) or similar, with some map type that can be updated as the block list changes.
To "block" banned IPs in userspace, the TCP connection must be established first, wasting time and resources.
It would be better to use a eBPF script, possibly via RedBPF or similar, with some map type that can be updated as the block list changes.