Advanced programmability and recent updates with tc’s cls bpf

eBPF: efficient, generic in-kernel bytecode engine Today used mainly in networking, tracing, sandboxing tc, XDP, socket filters/demuxing, perf, bcc, seccomp, LSM, ... cls bpf programmable classifier and action in tc subsystem Attachable to ingress, egress of kernel’s networking data path