Firewall capabilities of operating systems are traditionally provided by inflexible filter
routines or hooks in the kernel. These require privileged access to be configured and are not …

The extended Berkeley Packet Filter (eBPF) is a recent technology available in the Linux
kernel that enables flexible data processing. However, so far the eBPF was mainly used for …

Extended Berkeley Packet Filter (eBPF) is an instruction set and an execution environment
inside the Linux kernel. It enables modification, interaction, and kernel programmability at …

The extended Berkeley Packet Filter (eBPF) is a lightweight and fast 64-bit RISC-like virtual
machine (VM) inside the Linux kernel. eBPF has emerged as the most promising and de …

Nowadays, the traditional security features of a Linux system are centered on iptables, which
has been the most used packet filtering mechanism in the Linux kernel for almost 20+ years …

FILTERING POLICIES BASED UNIQUELY on packet header information are obsolete.
These days, stateful firewalls provide advanced mechanisms to let sysadmins and security …

The introduction of Software-Defined Networks (SDN) and the evolution towards
programmable data planes bring the opportunity to offload several functions to the data …

The sheer increase in network speed and the massive deployment of containerized
applications in a Linux server has led to the consciousness that iptables, the current de-facto …

This paper presents Swift, a packet filter for high performance packet capture on commercial
off-the-shelf hardware. The key features of Swift include (1) extremely low filter update …

FFPF is a network monitoring framework designed for three things: speed (handling high link
rates), scalability (ability to handle multiple applications) and exibility. Multiple applications …