g0lab/g0efilter ? reverse-engineered prompt

Build me a tool that controls what network traffic containers are allowed to make, so I can attach it beside a workload and block or allow outgoing requests by IP, CIDR, or domain. I want it to support simple allowlists and denylists, plus more advanced domain matching like wildcards and regular expressions, and it should be able to work in a few modes for HTTPS, DNS, and stricter DNS based filtering. It should also have a way to run in audit or learning mode, reload policy changes without restarting, and show what was allowed or blocked.

If it makes sense, include the Kubernetes sidecar and controller setup too, so whole pods can be filtered without changing the app manifests. A small dashboard for viewing traffic and handling unblock requests would be great as well. Keep it secure and lightweight, and if you need current details for Kubernetes or GitHub Actions behavior, look up the latest docs online.