Finally found some time to dig into Linux Network Namespaces. It's an amazingly powerful capability for testing tools like #Suricata

Here's how it can be used for Suricata even running in Github-Actions:
https://github.com/OISF/suricata/pull/14700

It tests our AF_PACKET IPS bridge mode by bridging 2 network namespaces. It also tests our NFQUEUE based IPS mode, where it routes between 2 network name spaces.

This was a great explanation, very helpful:
https://www.redhat.com/en/blog/net-namespaces

Next: SV like tooling :)