This talk provides a deep-dive into the Linux kernel's eBPF engine and how iproute2's tc (traffic control) tool is utilizing it through cls_bpf for providing a programmable data plane for network packets. It's perhaps the most flexible and lightweight entity from all tc classifier/actions and can be used for classifying, encap, mangling, forwarding packets, etc. The talk also presents recently upstreamed features that made it into the eBPF architecture, and gives a short intro on how eBPF programs can be developed in restricted C syntax, compiled with llvm and loaded through tc.
Speakers: Daniel Borkmann