#xdp

Dropping Packets Before the Stack Wakes Up: A Practical Look at XDP

Linux XDP lets a verified eBPF program drop, pass, or redirect packets right after the NIC receives them, before the network stack pays any cost. A worked ICMP-drop example shows how to compile, attach, verify, and safely detach.