4 ms·
Cloudflare is using XDP to mitigate DDoS https://blog.cloudflare.com/how-to-drop-10-million-packets/ https://blog.cloudflare.com/how-to-drop-10-million-packets
by ArtWomb 8y ago
Cloudflare is using XDP to mitigate DDoS
https://blog.cloudflare.com/how-to-drop-10-million-packets/ https://blog.cloudflare.com/how-to-drop-10-million-packets/
- lostmsu 8y ago> With XDP we can run eBPF code in the context of a network driver. This looks interesting, but it also looks like it was designed to run this eBPF code on the network adapter itself, when it allows it. Otherwise, why the bytecode?
- lmb 8y agoThe byte code is used as a target for verification, and is designed to be easily JITable on x86 and arm. There are network cards which offer eBPF offload, but they only implement a subset of features available in the kernel. I imagine that keeping up is hard, since the technology is moving quickly. Netronome seems to have the most advanced eBPF offload available.