Bpfilter (and user-mode blobs) for 4.18
Bpfilter (and user-mode blobs) for 4.18
Posted May 31, 2018 8:34 UTC (Thu) by gdamjan (subscriber, #33634)In reply to: Bpfilter (and user-mode blobs) for 4.18 by Sesse
Parent article: Bpfilter (and user-mode blobs) for 4.18
> The core motivation behind bpfilter is performance. An in-kernel, general-purpose packet filter must necessarily offer a wide range of features; any given site will probably only use a small subset of those features. The result is a lot of unused code and time spent checking for whether a given feature is in use, slowing the whole thing down. A packet-filtering configuration expressed as a BPF program, instead, contains only the code needed to implement the desired policy. Once that code is translated to native code by the just-in-time compiler, it should be both compact and fast. The networking developers hope that it will be fast enough to win back some of the users who have moved to proprietary user-space filtering implementations.
Posted May 31, 2018 10:41 UTC (Thu)
by Sesse (subscriber, #53779)
[Link]
Bpfilter (and user-mode blobs) for 4.18
That's a whole lot of assertion without any benchmarks to back it up.