Hacker News Reader

How did you use tracing to check the current state of a machine’s iptables rules?

In this case I used `perf` utility, but only because the server does not have a proper observability tool.

Take a look at this Netflix presentation, especially on the screenshots of their web interface tool: https://archives.kernel-recipes.org/wp-content/uploads/2025/...

That is a command line tool run over ssh. If you have invented a new way to run command line tools, that’s great (and very possible, writing a service that can fork+exec and map stdio), but it is the equivalent to using ssh. You cannot run commands using traces.

With that mindset anything is equivalent to ssh. The command line is not the pinnacle of user interfaces and giving admins full control of the machine isn't the pinnacle of security either.

We need to accept that UNIX did not get things right decades ago and be willing to evolve UX and security to a better place.

Happy to try an alternative. Traces I have tried, and it is not an alternative.

Reply on news.ycombinator.com