This approach is very similar to what https://github.com/cilium/cilium is doing for containers right? I wonder if it would be easy to reuse the battle-tested bpf programs that cilium provides and load them into systemd units.

There is more crazy shit that we can do. Like set up entire service meshes with load balancers for your systemd units. Very neat.