Nftables: a new packet filtering engine

Posted Apr 4, 2009 18:56 UTC (Sat) by mjcoder (guest, #54432)
Parent article: Nftables: a new packet filtering engine

Hehehehe, so we have a VM in the Linux kernel. What about the LLVM, or .NET VM (mono) or even Java? This would have the nice side-effect of having a JITted network filter application. (Don't take this too serious ...)

Nftables: a new packet filtering engine

Posted Apr 6, 2009 15:49 UTC (Mon) by kanchev (guest, #42519) [Link]

Why not LLVM? It's not just a VM, it's a compiler framework. You'll just need to develop a proper frontend which parses the nftables syntax and a backend which generates bytecode for the kernel VM. As a bonus you'll get the LLVM optimizations.