Cloudflare

Production ready eBPF, or how we fixed the BSD socket API

Feb 17, 2022Lorenz Bauer
Production ready eBPF, or how we fixed the BSD socket API
SummaryAI, from the source post

This post introduces 'tubular', an open-sourced eBPF-based tooling for managing network traffic at the kernel level. It addresses limitations of the traditional BSD socket API by enabling advanced features like handling millions of IPs, coexisting multiple services on the same IP addresses, and managing dynamic service addresses. This significantly enhances Cloudflare's ability to manage and secure its network infrastructure, particularly for products like Spectrum, by providing more granular control and robustness beyond standard OS capabilities.

More from the Website Security & Threat Management trail