nftables
A next-generation packet filtering framework of the Linux kernel intended to replace iptables, providing more unified rule syntax.
Timeline (last 90 days)
A more pragmatic self-hosted security route is to perform network isolation at the operating system or container level (such as eBPF or iptables/nftables), combined with a credential broker and short-term tokens, at the cost of increased deployment complexity.
The gate performs six layers of checks in sequence before a request leaves the host: authentication, quota caps, pre-call budget reservation, fail-closed, and network-layer nftables outbound traffic interception.
The audit found that the enforcement boundary was not where the author claimed: the nft rule blocked only one uid, while the channel that spawns the worker processes runs under another uid that has passwordless sudo and docker group membership, and can directly reach the provider hosts and read the real key.
The nftables nft rule draws the enforcement boundary by uid only, and docker group membership is equivalent to root in most Linux configurations, so the nft rule is defense in depth, not enforcement.
All Facts (4)
A more pragmatic self-hosted security route is to perform network isolation at the operating system or container level (such as eBPF or iptables/nftables), combined with a credential broker and short-term tokens, at the cost of increased deployment complexity.
50%UnverifiedThe gate performs six layers of checks in sequence before a request leaves the host: authentication, quota caps, pre-call budget reservation, fail-closed, and network-layer nftables outbound traffic interception.
50%UnverifiedThe audit found that the enforcement boundary was not where the author claimed: the nft rule blocked only one uid, while the channel that spawns the worker processes runs under another uid that has passwordless sudo and docker group membership, and can directly reach the provider hosts and read the real key.
50%UnverifiedThe nftables nft rule draws the enforcement boundary by uid only, and docker group membership is equivalent to root in most Linux configurations, so the nft rule is defense in depth, not enforcement.
50%