BPF-Based Linux Firewall “bpfilter” Shows Impressive Performance Potentialhegt/he

Generating much excitement back in 2018 was bpfilter for the potential to better Linux’s firewall and packet filtering by making it more robust and performance. Recently work on this BPF-based firewall solution was renewed and the performance potential over iptables and nftables is looking very good for the future with more feature work planned around new matches and targets, containers integration, in-place upgrades support, privilege separation, and BPF code optimization support.