Uploaded July 2026 | Updated September 2026, 1 week ago
Talk by Quentin Deslandes
socallinuxexpo.org/scale/23x/presentations/bpfilter-ebpf-based-firewall-fast-packets-filtering
iptables and nftables are the standard for Linux packet filtering: well-documented and widely understood. But at high bandwidth, BPF is the fast alternative, although it means writing C and fighting the BPF verifier.
bpfilter bridges the gap: an iptables-like DSL that compiles to BPF bytecode.
This hands-on talk covers Linux filtering tradeoffs, introduces bpfilter, and demos real-world usage from writing rules to debugging.
Talk by Quentin Deslandes
socallinuxexpo.org/scale/23x/presentations/bpfilter-ebpf-based-firewall-fast-packets-filtering
iptables and nftables are the standard for Linux packet filtering: well-documented and widely understood. But at high bandwidth, BPF is the fast alternative, although it means writing C and fighting the BPF verifier.
bpfilter bridges the gap: an iptables-like DSL that compiles to BPF bytecode.
This hands-on talk covers Linux filtering tradeoffs, introduces bpfilter, and demos real-world usage from writing rules to debugging.
