Hacker News Reader

Comment by tkinom | Hacker News Reader

After I see app's bandwidth usage, if I want to block that app's traffic, what's the best way to do that?

You have to run the app with dedicated UID, then

    iptables -I OUTPUT -m owner --uid-owner <UID> -j DROP
    ip6tables -I OUTPUT -m owner --uid-owner <UID> -j DROP

Run the app in a separate netns and then you can create iptables/netfilter rules that match on that netns.