XD

XDP firewall that auto-syncs open ports – built after my VPS got DDoS'd

Hacker News

XDP firewall that auto-syncs open ports – built after my VPS got DDoS'd

A few days ago, someone decided to DDoS the entire IP range of my Hong Kong VPS provider. fail2ban did its job a little too enthusiastically — banned 20,000+ IPs, ran the machine out of memory, and triggered a kernel panic. Great. :/ That's when I realized the problem: fail2ban lets packets hit the kernel stack first, then reacts. Under a real flood, that reaction cost alone is enough to kill the machine. I went down the XDP/eBPF rabbit hole — packets get dropped at the NIC driver level, before they even touch the kernel. The other thing that annoyed me was manually managing port rules, so I built a daemon that watches for new listening ports via Netlink Process Connector and updates the BPF whitelist automatically. What it does: ~34–65 ns/packet drop on KVM VPS, auto-syncs open ports, handles IPv6 extension headers, one-liner install. What it won't do: won't save you if your uplink is already saturated — not a replacement for upstream scrubbing. Would love feedback, especially if something breaks on your setup. First time posting here — hello everyone!

Visit product View on Hacker NewsFeb 27, 2026

Actual performance

1points

Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →

Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting

88%88% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Product HuntOn track for Day 1 leaderboard · Strong signals: mac, new, open · Missing: agents, macos, agent

79%79% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

Hacker NewsMay not resonate with HN audience · Strong signals: ide, 000, io · Missing: https docs, excited, just released

46%46% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive

38%38% predicted probability of success on AppSumo, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal

34%34% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

19%19% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

We got fed up with Airbrake, so we built Coalmine47%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

We got fed up with Airbrake, so we built Coalmine

I got Ghost up and running on a VPS54%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

I got Ghost up and running on a VPS

Deckrd35%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

The Firewall for Humanity.

Indie Hackerscommitment-full-time

I got tired of stressing about my karma, so I wrote this.46%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

I got tired of stressing about my karma, so I wrote this.

I got bored, so I made a roguelike49%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

I got bored, so I made a roguelike

We Got Your Back49%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

We Got Your Back

CozyParent31%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Be the dad who’s got it handled

Indie Hackers1calendar

Wegacha58%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

We get it, we got you

Indie Hackers16$10,000/moadvertising

GoalHappy79%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Built for myself when Todoist and Notion got too much.

Indie Hackerscommitment-side-project

sn00p – poc app firewall31%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

sn00p – poc app firewall

Browse all products Analyze your launch