An eBPF-based packet filtering framework.
bpfilter transforms how you control network traffic by leveraging the power of eBPF technology. This framework elegantly translates filtering rules into optimized BPF programs, bringing unparalleled performance and flexibility to your packet filtering needs.
Key features
High performance: utilizes eBPF’s near-native performance capabilities
Low overhead: minimal resource consumption with maximized efficiency
Developer-friendly: clean architecture with clear separation of components
bpfilter combines two components: bfcli, a CLI that allows users to define filtering rules in human-readable text, and libbpfilter, a library that converts these rules into efficient BPF programs and manages their lifecycle.
Want to know more about bpfilter?
New to bpfilter? Install it, then follow Your first filtering chain.
Complete a task: How-to guides cover installing bpfilter and applying, updating, inspecting, and removing filters.
Look up syntax or behavior: Reference describes the
bfclicommands and the ruleset syntax.Understand how filtering works: Understanding bpfilter explains rule evaluation, hook placement, and the chain lifecycle.
Work on bpfilter: the developer documentation covers building, contributing, and the code base.
You can also watch our talk at Scale!