The Linux kernel grew a programmable packet datapath. Where the hooks actually sit — XDP at the driver edge, tc/clsact in the stack — what each one can and cannot do, how DDoS scrubbing and L4 load balancing get built on them, and the honest operational cost of running eBPF in the datapath.
Linux-Kernel
-
eBPF for Networking