bpfilter: a BPF-based packet filtering framework
09-13, 12:30–12:55 (Europe/Berlin), Dome

Let's discuss about bpfilter, a userspace daemon that empowers services to create efficient packet-filtering BPF programs using a high-level representation of filtering rules.


For a significant period, bpfilter wasn't more than an empty usermode helper and an abandoned patch series. However, it has recently undergone active development as a userspace daemon, which can be found on GitHub at https://github.com/facebook/bpfilter. This daemon now offers userspace services a swift and user-friendly interface to generate packet-filtering BPF programs dynamically. This discussion aims to provide further insights into bpfilter, including its current capabilities, performance, and ongoing development efforts.

See also: Slides (618.2 KB)

I work at Meta as part of the Linux Userspace team, aiming to contribute to open-source projects.