BPF comes to firewalls
BPF comes to firewalls
Posted Feb 23, 2018 23:01 UTC (Fri) by ofranja (guest, #11084)Parent article: BPF comes to firewalls
> Developers should be careful, though; this could prove to be a slippery slope leading toward something that starts to look like a microkernel architecture.
Or, even further, an exokernel architecture.
In the original MIT exokernel research (~1995), a packet filter language w/JIT compiler is mentioned as a way to filter and delegate network traffic to userspace with minimal [1] kernel support (although not necessarily using these terms, but the general idea is the same).
[1] https://pdos.csail.mit.edu/archive/exo/exo-slides/sld011.htm