BPF Performance Tools: Linux System and Application Observability

Re:BPF Performance Tools: Linux System and Application Obser... by AndyMcConachie on Monday July 15, 2019 @06:38PM (#20445952)

It's great that BPF can be used to implement all kinds of monitoring tools for Linux. But I would really like it if pcap-filter finished implementing basic BPF primitives for IPv6 that have worked in IPv4 since the beginning.

From the pcap-filter(7) manpage: "Note that tcp, udp and other upper-layer protocol types only apply to IPv4, not IPv6 (this will be fixed in the future). "

Sometimes reading posts about BPF makes me think I'm the only one still using it to filter packets.

[ Parent | on HN ]

Re:BPF Performance Tools: Linux System and Application Obser... by ajor on Monday July 15, 2019 @10:23PM (#20447008)

There are still people working on packet filtering! The BPF enhancements are benefiting lots of different areas of the Linux world at the same time.

Cilium [1] is a great example of how the new capabilities of BPF can be used for more complex packet filtering, such as understanding higher level protocols.

[1] https://cilium.io/

[ Parent | on HN ]