2 ms·
Are eBPF and bpfilter the same thing? eBPF has been around longer than bpfilter right? 3.15 vs 4.18?
by eatonphil 6y ago
Are eBPF and bpfilter the same thing? eBPF has been around longer than bpfilter right? 3.15 vs 4.18?
- comex 6y agoLinux has (at this point) a variety of hooks you can attach eBPF programs to; bpfilter is one of them. The naming is confusing. BPF stands for Berkeley Packet Filter, but its original use case was only for capturing a copy of network packets for inspection (think tcpdump/Wireshark); the "filter" was just used to select which packets should be captured. bpfilter, on the other hand, applies eBPF to firewalling – in other words, a more typical definition of "packet filter".