mirror of
https://github.com/ParrotXray/Mantis.git
synced 2026-08-24 19:50:28 +09:00
2c0a4a8b4d
Root cause: WebSocketProvider opens 24 flow-stat WebSocket connections simultaneously. Each connection on every refresh calls get_ipv4/ipv6_flow_data, which calls join_all() on GeoIP lookups for every IP in the flow map. On cache miss, each lookup calls task::spawn_blocking unconditionally — so 24 connections × N flows × cold cache = unbounded OS thread creation. Fix: add OwnedSemaphorePermit (MAX_CONCURRENT_DB_LOOKUPS = 8) to GeoIpService. The permit is moved into spawn_blocking so it is held for the full duration of the blocking call and released when the closure returns. Cached hits and private IPs are unaffected (no semaphore needed). https://claude.ai/code/session_01Wen51749mAnwBEfh7XmvUw
NetGuardia
Project Overview
NetGuardia is a high-performance network security solution that combines eBPF XDP technology with deep learning models to provide advanced network protection. The system operates as a standalone network appliance that can run on any Ubuntu-based system with compatible network hardware.
Core Technologies
- eBPF XDP Technology - Provides high-performance packet processing directly at the data link layer
- Deep Learning Models - Identifies and predicts potential network attacks with intelligent threat detection
- Hardware Integration - Designed to work with Intel i350 T2 and similar enterprise-grade network interface cards
Functional Modules
Resource Overview
- Real-time control system occupancy rate
Dashboard Overview
- Real-time network traffic monitoring and visualization
- Recent traffic statistics and trend analysis
Detailed Traffic Statistics
- Detailed traffic usage information per IP address
Network Access Control
- IPv4/IPv6 whitelist and blacklist management
- Precise port-level access control
System Features
- High Performance - Low-latency packet processing with minimal network performance impact
- User-Friendly - Cross-platform web management interface with intuitive operation
- Reliability - Hardware-accelerated processing ensures stable operation
- Scalability - Modular design supports functional expansion
System Requirements
- Ubuntu-based operating system (Ubuntu 24.04 LTS or newer recommended)
- Dual-port network interface card (Intel i350 T2 or compatible XDP-capable NIC)
- Root/sudo access for eBPF program loading
Hardware Compatibility
NetGuardia is designed to work on any Ubuntu-based system meeting the following requirements:
- Network Interface: Any dual-port NIC supporting XDP native or offload mode (Intel i350 T2 recommended)
- CPU: Multi-core processor recommended for optimal performance
- Memory: 8GB RAM minimum, 16GB or more for high-traffic environments
The system is not limited to embedded platforms and can be deployed on standard server hardware, virtual machines, or dedicated appliances running Ubuntu.