Yes, it's eBPF but the solution is quite neat to be honest. And you can integrate it into systemd units.