feat(context): Add --disable-reverse-match flag to control reverse match behavior (#297)

Closes #284

Author: mozillazg

README.md

@@ -296,6 +296,7 @@ If this flag isn't specified, it defaults to `tc`.
           --cri-runtime-address string                   Address of CRI container runtime service (default: uses in order the first successful one of [/var/run/dockershim.sock, /var/run/cri-dockerd.sock, /run/crio/crio.sock, /run/containerd/containerd.sock])
           --delay-before-handle-packet-events duration   Delay some durations before handle packet events
       -Q, --direction string                             Choose send/receive direction for which packets should be captured. Possible values are 'in', 'out' and 'inout' (default "inout")
+          --disable-reverse-match                        Disable reverse match for TCP and UDP packets.
           --docker-address string                        Address of Docker Engine service (default "/var/run/docker.sock")
           --embed-keylog-to-pcapng -- CMD [ARGS]         Write TLS Key Log file to this path (experimental: only support unstripped Go binary and must combined with -- CMD [ARGS])
           --event-chan-size uint                         Size of event chan (default 20)

bpf/bpf.go

@@ -58,6 +58,8 @@ type Options struct {
 	hookNetDev     bool
 	kernelTypes    *btf.Spec
 	backend        types.NetHookBackend
+
+	disableReverseMatch bool
 }
 
 func NewBPF() (*BPF, error) {
@@ -115,6 +117,9 @@ func (b *BPF) Load(opts Options) error {
 	if b.useRingBufSubmitSkb {
 		config.UseRingbufSubmitSkb = 1
 	}
+	if opts.disableReverseMatch {
+		config.DisableReverseMatch = 1
+	}
 	if opts.backend != types.NetHookBackendCgroupSkb {
 		b.disableCgroupSkb()
 	}
@@ -683,6 +688,11 @@ func (opts *Options) WithMaxPayloadSize(n uint32) *Options {
 	return opts
 }
 
+func (opts *Options) WithDisableReverseMatch(v bool) *Options {
+	opts.disableReverseMatch = v
+	return opts
+}
+
 func (opts *Options) WithHookMount(v bool) *Options {
 	opts.hookMount = v
 	return opts