Open Source Summit Europe 2024

With the rise in container use, it's becoming crucial to safeguard compromised containers from malicious exploitation. A compromised container could be hijacked to join a network of computers to participating in a Denial of Service attack, leak sensitive information back to an attacker or be used to steal compute resources for mining cryptocurrency. Ruturaj introduces a packet filter built using eBPF to filter packets based on their L3 and L4 destination metadata (such as destination IP address and port) as well as the process and container (cgroup) of origin. This filter also detects any new containers at runtime and filters their traffic.