3 ms·
The game changing idea behind eBPF is XDP in my opinion. Lots of network drivers and NICs support offloading XDP programs ("xdp_prog") to the network controlle
by cookiengineer 3y ago
The game changing idea behind eBPF is XDP in my opinion.
Lots of network drivers and NICs support offloading XDP programs ("xdp_prog") to the network controller's chipset, which results in zero CPU i/o interrupts if you e.g. use an XDP_DROP to block traffic.
Being able to block network traffic _before_ it reaches even kernelspace is a game changer.