hi, what do you think about the approaches of CiliumProject ? (https://opensource.googleblog.com/2016/11/cilium-networking-...). They do have a Docker plugin (but does not work seamlessly with Swarm), but they claim to use BPF for superior performance https://cilium.io/blog/2018/04/17/why-is-the-kernel-communit...

I think the Kubernetes and Swarm devs have generally leveraged IPVS as the next step from iptables. Any thoughts on going straight to BPF ?