Production ready eBPF, or how we fixed the BSD socket API

What this post added

This post introduces 'tubular', an open-sourced eBPF-based tooling for managing network traffic at the kernel level. It addresses limitations of the traditional BSD socket API by enabling advanced features like handling millions of IPs, coexisting multiple services on the same IP addresses, and managing dynamic service addresses. This significantly enhances Cloudflare's ability to manage and secure its network infrastructure, particularly for products like Spectrum, by providing more granular control and robustness beyond standard OS capabilities.