Improve ebpf permanent failure detection

firewall/interception/ebpf/bandwidth/interface.go

@@ -28,6 +28,10 @@ func BandwidthStatsWorker(ctx context.Context, collectInterval time.Duration, ba
 	// Allow the current process to lock memory for eBPF resources.
 	err := rlimit.RemoveMemlock()
 	if err != nil {
+		if ebpfLoadingFailed.Add(1) >= 5 {
+			log.Warningf("ebpf: failed to remove memlock 5 times, giving up with error %s", err)
+			return nil
+		}
 		return fmt.Errorf("ebpf: failed to remove memlock: %w", err)
 	}
 

firewall/interception/ebpf/connection_listener/worker.go

@@ -26,6 +26,10 @@ var ebpfLoadingFailed atomic.Uint32
 func ConnectionListenerWorker(ctx context.Context, packets chan packet.Packet) error {
 	// Allow the current process to lock memory for eBPF resources.
 	if err := rlimit.RemoveMemlock(); err != nil {
+		if ebpfLoadingFailed.Add(1) >= 5 {
+			log.Warningf("ebpf: failed to remove memlock 5 times, giving up with error %s", err)
+			return nil
+		}
 		return fmt.Errorf("ebpf: failed to remove ebpf memlock: %w", err)
 	}