Docker container makes it easy to deploy host based Intrusion Detection System IDS Suricata, and with the power of eBPF XDP DDOS, IDS is turned into not only monitoring system, but also stops DDOS attack right at the earliest point
docker run --rm -it --privileged --net=host --name suricata -v $(pwd)/etc/suricata:/etc/suricata -d -e SURICATA_OPTIONS="--af-packet=eno2 -vvv" -e SYNPROXY_PORTS="22,80,8080" vli39/suricata:xdp
https://github.com/vincentmli/docker-...
https://github.com/vincentmli/suricat...