Explore the innovative bpfilter, a BPF-based firewall, in this comprehensive Linux Plumbers Conference talk by Dmitrii Banshchikov. Delve into the intricacies of iptables rules, optimization techniques, and kernel API integration. Discover the role of userspace in bpfilter implementation, including the helper process and table filter mechanisms. Gain insights into BPF program generation, code creation, and EDP port margin considerations. Analyze performance metrics, limitations, and deployment models for this cutting-edge firewall solution. Examine packet forwarding techniques and potential use cases, equipping yourself with valuable knowledge to enhance network security and efficiency in Linux environments.
Overview
Syllabus
Introduction
iptables
rules
example
match
optimization
kernel API
userspace
bpfilter
userspace helper
process
table filter
BPF program generation
BPF rules
Code generation
EDP port margin
Program generation
Performance
Limitations
Conclusion
Deployment model
Packet forwarding
Performance features
Use case
Taught by
Linux Plumbers Conference
