SITE CAPTUREBased on information published on the service's website. Selection and review policy
WHAT IT DOES
What does it do?
Bomfather Agent uses eBPF to block actions that violate policy in kernel space. YAML policies can specify which executables may access protected directories or IP addresses. A property can also limit an executable's network connections to specific IP addresses.
KEY FEATURES
Key features
- Enforce policies in kernel space with eBPF
- Define access rules in YAML files
- Allow access to protected directories by executable
- Restrict the IP addresses an executable can connect to
- View the agent's Prometheus metrics with a status command