On Fri, Aug 14, 2020, at 5:06 PM, Grant Edwards wrote: > On 2020-08-14, Grant Edwards <grant.b.edwa...@gmail.com> wrote: > > > I think this should work, but I need to rebuild my kernel with the > > iptables "owner" extension enabled: > > > > iptables -A OUTPUT -o <interface> -m owner --uid-owner plex -j DROP > > I can confirm, that did indeed work as desired. > > Even with the kernel rebuild it was far less work than getting set up > to run a docker container (which also would have required a kernel > rebuild) or running the server in a separate network namespace. >
Are you able to see any perf impact from the generated but dropped packets?
