3 ms·
It's really exciting to see technology being moved into the mainline kernel (see the lwn/mailing list posts) and being so quickly useful to many entities doing
by hardwaresofton 9y ago
It's really exciting to see technology being moved into the mainline kernel (see the lwn/mailing list posts) and being so quickly useful to many entities doing serious work (tm) with it.
KubeCon Copenhagen just wrapped up, and I'm working through to watching all of them but here's a video on eBPF applied to tracing:
https://www.youtube.com/watch?v=ug3lYZdN0Bk&index=5&list=PLj6h78yzYM2N8GdbjmhVU65KYm_68qBmo https://www.youtube.com/watch?v=ug3lYZdN0Bk&index=5&list=PLj...
RIP to people who were working on nftables.
- catern 9y agoThe OP states that BPF is replacing nftables as if it was a foregone conclusion, but it's not at all certain - it's still far from happening.
- hardwaresofton 9y agoIt was actually the lwn post (which is basically a summary of the mailing list) that made me think that nftables was doomed. https://lwn.net/Articles/747551/ https://lwn.net/Articles/747551/ seems that BPF is taking the nftables API, which seemed to be the core value-add (reimagined iptables API), and actually delivering on the performance benefits as well. I hold people that work on the kernel in pretty high regard, and I expect them to be pragmatic about it (the whole "strong opinions loosely held" thing), and if BPF doesn't introduce too many possible security vulnerabilities (that's about the only issue with it I can see), it might represent the best of both worlds -- new api + improved performance.