TL;DR: systemd now can do per-service IP traffic accounting, as well as access control for IP address ranges. Last Friday we released systemd 235. I already blogged about its Dynamic User feature in detail, but there's one more piece of new functionality that I think deserves special attention: IP accounting and access control. Before v235 systemd already provided per-unit resource management hook