The Agent Egress Illusion: Inside the Google AX Wire Flaw
中文摘要
Google AX 的 wire protocol 会丢弃配置的出站端口，本文介绍了如何利用确定性 eBPF socket 隔离来修复该漏洞。
English Summary
Google AX's wire protocol drops configured egress ports. This article explains how to use deterministic eBPF socket isolation to fix this flaw.
原文节选
Google AX configures ports on every egress rule, but its wire protocol drops them. Here is how to enforce deterministic eBPF socket iso. Continue reading on Towards AI »