« Previous 1 2
Bpfilter offers a new approach to packet filtering in Linux
New Filter
Much More Work Remains
The bpfilter packet filter system is still little more than a proof of concept that has provoked a whole bunch of feedback loops on the kernel mailing list in recent months. If bpfilter actually works as advertised, Linux admins will quickly adopt it.
Bpfilter is just an example of the power that BPF brings to Linux, with the possibility to run microservices from the kernel. This functionality will increasingly make BPF detachable from the network context and could lead to other innovations in the Linux space.
Infos
- netfilter: https://www.netfilter.org
- BPF comes to firewalls: https://lwn.net/Articles/747551
The Author
In his spare time, Debian developer Martin Gerhard Loschwitz works as a Telekom Public Cloud Architect at T-Systems and primarily deals with topics such as OpenStack, Ceph, and Kubernetes.
« Previous 1 2
Buy this article as PDF
(incl. VAT)
Buy ADMIN Magazine
US / Canada
UK / Australia
Related content
- Goodbye Iptables; Hello Nftables
-
Linux nftables packet filter
The latest nftables packet filter implementation, now available in the Linux kernel, promises better performance and simpler syntax and operation. -
Red Hat Enterprise Linux 8 pre-series test
Red Hat Enterprise Linux is the flagship Red Hat operating system and the basis for many other company products; therefore, much is at stake with version 8. -
IPv6 Tables
We design a basic set of ip6tables rules for an IPv6 firewall. -
Controlled container communication
Tune the iptables configuration for Docker by establishing your own forwarding rules.
Subscribe to our ADMIN Newsletters
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Most Popular
Support Our Work
ADMIN content is made possible with support from readers like you. Please consider contributing when you've found an article to be beneficial.
