3 ms·

yep.

• deleted 9y ago
  [deleted]
• craftyguy 9y ago
  I'm guessing this is because of the relatively low performance compared to BFP?
• aktau 9y ago
  I'd hope not, and that the nftables (nft) language can be implemented in top of this new infra. It is much easier to use and audit than iptables. EDIT: me, parent and grandparent should've read the article. There's already two projects underway to make userspace nft work with bpfilter as a backend. Sweet!