Re:LittleSnitch for Linux
by littlesnitch on Thursday April 09, 2026 @07:02AM
(#47702042)
eBPF programs are able to accuratly process network traffic in high performance, but the amount of CPU instructions you can use is limited. Otherwise it would not be high performance. This limits the complexity of in-kernel processing.
[ Parent
| on HN ]
Re:LittleSnitch for Linux
by serious_angel on Thursday April 09, 2026 @07:52AM
(#47702462)
Thank you for the response. Yet, how the heck the CPU instructions you inject in (that are being processed within the same network processing) limit the capabilities of the flow, if you literally put your calls within the same networking context? Please provide any actual document that proves your point.