Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
bpfilter documentation
Light Logo Dark Logo

Users

  • Overview
  • Tutorials
    • Your first filtering chain
  • How-to guides
    • Install bpfilter
    • Apply a ruleset from a file
    • Block traffic from selected addresses
    • Update a chain without interrupting filtering
    • Update a blocklist
    • Inspect counters and logs
    • Remove a filtering chain
  • Reference
    • bfcli commands and global options
    • Ruleset syntax
    • Chains
    • Hooks
    • Rules, actions, and verdicts
    • Matchers
    • Sets
  • Understanding bpfilter
    • Rulesets, chains, and rule evaluation
    • Where filtering happens
    • Loading, attaching, and updating chains

Developers

  • Build from sources
  • Contributing
  • Coding style
  • Memory and resource management
  • Modules
    • libbpfilter
    • Core
      • Locking
    • Helpers
  • Packets processing
  • Programs generation
  • Tests

External

  • GitHub repository
  • Benchmarks
  • Coverage
Back to top
View this page

Understanding bpfilter¶

How does bpfilter actually filter packets? These pages explain how rules are evaluated, where chains are attached in the kernel, and what happens when you load, update, or remove them.

  • Rulesets, chains, and rule evaluation
  • Where filtering happens
  • Loading, attaching, and updating chains
Next
Rulesets, chains, and rule evaluation
Previous
Sets
Copyright ©2024 Meta Platforms, Inc
Privacy Policy, Terms of Use
Made with Sphinx and @pradyunsg's Furo