Uploaded August 2020 | Updated September 2026, 3 minutes ago
From: bsdcan.org/events/bsdcan_2020/schedule/session/37-rfpf-fast-packet-filtering-in-userspace
Packet classification and filtering at and above 10 Gbps speeds is today mainly a realm of proprietary equipment vendors, as traditional software firewalls struggle to forward more than a few million packets per second. In this talk we'll present RFPF, a software packet filtering datapath which forwards 44 Mpps (limited by PCIe bus speed) on a commodity CPU, while doing multiple longest prefix matching lookups in large datasets (such as GeoIP, blacklists, or full-view BGP snapshots) per each packet.
From: bsdcan.org/events/bsdcan_2020/schedule/session/37-rfpf-fast-packet-filtering-in-userspace
Packet classification and filtering at and above 10 Gbps speeds is today mainly a realm of proprietary equipment vendors, as traditional software firewalls struggle to forward more than a few million packets per second. In this talk we'll present RFPF, a software packet filtering datapath which forwards 44 Mpps (limited by PCIe bus speed) on a commodity CPU, while doing multiple longest prefix matching lookups in large datasets (such as GeoIP, blacklists, or full-view BGP snapshots) per each packet.
