3 ms·
This is super interesting! However, I fail to see the benefits vs. an XDP probe attached to a VM's TAP interface. It already bypasses the host's stack, and can
by tuetuopay 3y ago
This is super interesting!
However, I fail to see the benefits vs. an XDP probe attached to a VM's TAP interface. It already bypasses the host's stack, and can already redirect to other network devices. Those can also modify/resize the packet to add e.g. encapsulation.
Perhaps those get passed a full SKB instead of a "small" packet? As with virtio offloads, guests can pass a full 64k "packet" for a full TCP buffer, instead of already segmented packets, offloading those to the physical card.
- phrotoma 3y agoHere's the video of the talk associated with linked the slide deck, I haven't finished it yet but it seems like the benefit is making the life of the bpf programmer easier by supporting something like a "filter chain" of bpf programs and some nice API's for adding / removing and semantics for combining them. Hopefully someone else can expand on this. https://youtu.be/EM09k066pB8?si=9UvNXGMcrLuNf7Q9 https://youtu.be/EM09k066pB8?si=9UvNXGMcrLuNf7Q9