4 ms·
So eBPF for a WAF isn't worth it? re: eBPF and WAFs: https://news.ycombinator.com/item?id=45951011 https://news.ycombinator.com/item?id=45951011 From https://
by westurner 10mo ago
So eBPF for a WAF isn't worth it?
re: eBPF and WAFs:
https://news.ycombinator.com/item?id=45951011 https://news.ycombinator.com/item?id=45951011
From https://news.ycombinator.com/context?id=43564972 https://news.ycombinator.com/context?id=43564972 :
> Should a microkernel implement eBPF and WASM, or, for the same reasons that justify a microkernel should eBPF and most other things be confined or relegated or segregated in userspace; in terms of microkernel goals like separation of concerns and least privilege and then performance?
"Isolated Execution Environment for eBPF" (2025-04) https://news.ycombinator.com/item?id=43697214 https://news.ycombinator.com/item?id=43697214
"ePass: Verifier-Cooperative Runtime Enforcement for eBPF" (2025-12) https://ebpf.foundation/epass-verifier-cooperative-runtime-enforcement-for-ebpf/ https://ebpf.foundation/epass-verifier-cooperative-runtime-e... ..
https://news.ycombinator.com/item?id=46412121 https://news.ycombinator.com/item?id=46412121