Observed arrival · 2026-10-18
moat: readable packet filters for XDP
An open-source language and toolchain for writing, testing, and loading XDP packet filters as eBPF.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Linux operators writing XDP firewall or DDoS rules
- Worth noticing
- The site describes kernel-based packet tests with a simulated clock, plus pcap replay and a model mode for use without a kernel.
Field notes
The homepage lays out a three-step workflow: check a .moat rules file, test expected packet verdicts, then load it on a named interface. It describes tests using the kernel verifier and BPF_PROG_TEST_RUN, with a simulated clock or pcap replay; a model mode is offered when a kernel is unavailable. Deployment examples include audit mode, atomic reloads, and counters exposed through moat stats and Prometheus-ready metrics.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue