Hi,
FYI, I ported XDP SYN flood protection from upstream Linux kernel source to open source firewall BPFire which is clone of IPFire GitHub - vincentmli/BPFire: BPFire development tree, enabled XDP DDoS protection for HAProxy runs in BPFire.
https://youtu.be/fNIBmBeIwSQ?si=UjV6NhG03oLkkPga
the XDP SYN flood protection also works for Linux distribution like Ubuntu, Debian…etc.