<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-IN link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Dear Sir, </p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I hope you are doing well.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Recently after completing basic hands-on on eBPF and CRIU, I understood the superpowers which comes to kernel by writing and hooking BPF programs to probes and hooks, which executes the BPF programs directly in kernel-space. In the process, I have few questions and needed your guidance to verify whether I am going correct. </p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>1. As per published here, do we need to re-write the entire iptables using BPF, or we just need to write BPF for adding and modifying IPtables rules - http://vger.kernel.org/lpc_net2018_talks/ebpf-firewall-paper-LPC.pdf</p><p class=MsoNormal>2. I am unable to build and execute bpf-firewall.c, I playing around with meson.build to compile it, is there any central tutorials available, which I can use to test or try the given bpf-firewall.c - https://github.com/systemd/systemd/blob/master/src/core/bpf-firewall.c</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I have also completed basic hands-on for using XDP to filter packets. However, I also certainly understand that we just need to write BPF program for flushing and adding rules via Iptables and not implement the filtering via XDP. </p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am eagerly looking forward to listen from you. </p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Best Regards,</p><p class=MsoNormal>Sahil Kumar Sahu</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Sent from <a href="https://go.microsoft.com/fwlink/?LinkId=550986">Mail</a> for Windows 10</p><p class=MsoNormal><o:p> </o:p></p></div></body></html>