Your IPs, your rules- enabling more efficient address space usage

What this post added

This post introduces the ability for customers to dynamically reallocate parts of their Bring Your Own IP (BYOIP) prefixes across different Cloudflare services (CDN, Spectrum, Magic Transit) using Service Bindings. This is enabled by extending the Tubular eBPF-based IP and port binding service to support dynamic updates of IP sets and iptable rules across Cloudflare's global infrastructure without requiring service restarts. The integration with the NGINX ingress proxy was addressed by introducing a shared Unix domain socket. The goal is to reduce the transition time for IP address prefix migrations between services from hours to minutes.