https://docs.mitigator.ru/v26.04/en/kb/bpf/ Recent content in Programmable Filter on BIFIT Mitigator Hugo -- gohugo.io en https://docs.mitigator.ru/v26.04/en/kb/bpf/tutorial/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/kb/bpf/tutorial/ This is a step‑by‑step example of how to write an MCR countermeasure with UDP authentication (protocol description) to get hands‑on experience with BPF countermeasure programming. The final program will be under 100 lines of code. You will need: MITIGATOR v20.06 or higher. Ability to run commands from the terminal. Basic knowledge of the C language (explanations will be provided as we go). Understanding that packets have protocols, headers, and payloads. Environment Setup Any operating system will work, but Linux is recommended. https://docs.mitigator.ru/v26.04/en/kb/bpf/api/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/kb/bpf/api/ API Documentation Overview Programs are loaded into MITIGATOR as ELF object files. They can use the API functions from mitigator_bpf.h (download). The compatibility policy applies to BPF. A minimal program must place metadata and code into the correct sections of the object file using macros: #include "mitigator_bpf.h" ENTRYPOINT enum Result program(Context ctx) { return RESULT_PASS; } PROGRAM_DISPLAY_ID("Example v0.1") Typically, programs are written in C and compiled with clang (EBPF support added in GCC 10).