Reimplementing pf as an eBPF/XDP dataplane on Linux

(blog.nfsensei.org)

19 points | by 882542F3884314B 2 days ago ago

4 comments

  • asmnzxklopqw 2 days ago ago

    PF configuration language that author considers to be “the clearest expression of firewall intent anyone has shipped” is 95% the configuration language of ipfilter, the initial solaris and bsd firewall software. Quite suspicious that the author doesn’t mention it, especially when pf started merely as a clone of the latter.

    • hlieberman 2 days ago ago

      Considering the author is the founder of pfSense and has been contributing to BSD since 1995, I suspect he knows about the origins of pf.

      • Chu4eeno 3 hours ago ago

        Considering the author of the text was an LLM (100% AI generated, not assisted on Pangram), I don't think so.

  • throawayonthe 2 days ago ago

    this seems very interesting, but the prose is extremely hard to read