Dear Sir,
My name is Mohammed Al samman, I'm a software engineer with more than 3 years of experience mainly in linux development and administration, although i am new to online freelanceing.
Related experience:
-developed linux firewall based on netfilter framework with command line interface in userspace by using netlink socket as (IPC) interprocess communication to send data from userspace to kernelspace.
-deep knowledge with the standard Linux Kernel networking subsystem including Netfilter packet flow control.
-good experiance of kernel socket programming.
-developed a kernel module to monitor power supply electrical current status (AC/DC) by using linux kernel notifier.
I believe i can deliver the kernel module needed and i do recommend to the firewall approach; as in kernel space we can do deeper packet inspection; DPI; like for example we may allow firefox to access facebook login page only, while allowing other process like chrome full access to all of the site; etc.
So it would greatly depend on your app, I can do both approaches; but the kernel module of couse have more fine grained control.
looking forward to discuss the requirements a little more;
Mohammed Al-Samman.