bpfilter: a BPF-based packet filtering framework

For a significant period, bpfilter wasn't more than an empty usermode helper and an abandoned patch series. However, it has recently undergone active development as a userspace daemon, which can be found on GitHub at https://github.com/facebook/bpfilter. bpfilter now offers userspace services a swift and user-friendly interface to generate packet-filtering BPF programs dynamically.

This talk aims to provide a high-level introduction to bpfilter, and dive deeper into on-the-fly BPF program generation: front-end clients, communication with the daemon, support for various BPF program types, manipulating BPF bytecode... Latest features introduced in bpfilter will be presented, as well as benchmark results.