Choosing a Linux Packet Filter: eBPF Socket Filters, Classic BPF, or nftables
Compare eBPF socket filters, classic BPF, and nftables for Linux packet filtering, then load and validate an eBPF program.
Loading…
ReadMeFeed / Community knowledge
#ebpf
Real questions. Useful conversations. Find the people who know your stack.
High-Performance Packet Filtering with Linux XDP
Learn how Linux XDP (eXpress Data Path) allows high-performance packet filtering by executing eBPF programs at the NIC driver level, bypassing the expensive kernel network stack.
Choosing Between Datadog Agent v6 and v7 in Kubernetes
Guidance on picking Datadog Agent v6 or v7 for Kubernetes clusters, with a feature table, trade‑offs, deployment steps, and validation checks.
datadog
kubernetesDropping Packets Before the Stack Wakes Up: A Practical Look at XDP
Linux XDP lets a verified eBPF program drop, pass, or redirect packets right after the NIC receives them, before the network stack pays any cost. A worked ICMP-drop example shows how to compile, attach, verify, and safely detach.
Libbpf and Linux Kernel Verifier Compatibility for Unprivileged BPF Loading
The goal is to establish whether a given libbpf release can successfully load an unprivileged BPF program that employs CO-RE relocations on a running Linux kernel, taking into account the kernel.unprivileged_bpf_disabled sysctl setting. Constraints include the kernel version threshold for unprivileged loading (≥5.8 when the sysctl is 0), the verifier tighten