Production ready eBPF, or how we fixed the BSD socket API
Feb 17, 2022Lorenz Bauer

Summary
This post introduces 'tubular', an open-sourced eBPF-based tooling for managing network traffic at the kernel level. It addresses limitations of the traditional BSD socket API by enabling advanced features like handling millions of IPs, coexisting multiple services on the same IP addresses, and managing dynamic service addresses. This significantly enhances Cloudflare's ability to manage and secure its network infrastructure, particularly for products like Spectrum, by providing more granular control and robustness beyond standard OS capabilities.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack