I will be honest with y'all, whenever someone coming with add-on sw launched into kernel I get anxiety attack as a platform engineer. This is very fragile matters both for performance as well as security. I see ddosify-alaz leverages prometheus node exporter for metrics collection which is awesome, using ebpf for service mash-map is promising but as I said I would prefer this part to be configurable to be not deployed if sre/platform teams do not want ebpf but only metric exporter capabilities to feed in to DDosify observability platform. Overall: Great Open source sw launch, please make it flexible for configuration. Cheers!