Why we use the Linux kernel's TCP stack

This post delves into Cloudflare's strategic decision to utilize the Linux kernel's TCP stack, explaining the benefits of hardware independence, time-sharing, and running multiple network applications. It highlights the trade-offs of userspace networking and kernel bypass, particularly the loss of concurrent application support. The post details Cloudflare's use of 'partial kernel bypass' for DDoS mitigation, offloading iptables to a userspace process to avoid IRQ storms. It also emphasizes the value of the Linux TCP stack's features, debugging tools, and ecosystem over custom solutions.