Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
README: update TLS/SSL SNI blocklist to XDP
Lunatik sni filter currently does not work for BPFire when chrome browser is used due to clienthello > 1500 bytes, XDP TLS/SSL has the same issue, to block domain access, it appears XDP DNS domain blocking works more reliable than SNI, so if there is need to block chrome browser for some domain, use XDP DNS domain blocking as mitigation. see #40 Signed-off-by: Vincent Li <[email protected]>
- Loading branch information