HBPF – eBPF in Hardware

Re:HBPF – eBPF in Hardware by nimish on Friday April 01, 2022 @02:13PM (#30881459)

Is it possible to do stateful stuff like NAT in eBPF without having to reimplement conntrack? I think cilium does it but has to reimplement in using maps.

[ Parent | on HN ]

Re:HBPF – eBPF in Hardware by ilovecaching on Friday April 01, 2022 @03:13PM (#30882161)

Not in an XDP program, it runs almost immediately after a packet has been rxed, and yes, Cilium does this by reimplementing similar logic in BPF. You could request new helpers for a SCHED_CLS type program though. The helpers don't exist today, but eBPF is use case driven, and if there is a good use case for it, it can go onto the roadmap.

[ Parent | on HN ]

Re:HBPF – eBPF in Hardware by nimish on Saturday April 02, 2022 @02:37PM (#30890547)

Thanks! I did find this: https://lists.linuxfoundation.org/pipermail/iovisor-dev/2017... and some references to bpf_skb_ct_lookup/bpf_xdp_ct_lookup -- are these fully baked?

[ Parent | on HN ]