BPFILTER Landing For Linux 4.18 For Eventually Better Firewall / Packet Filtering

Written by Michael Larabel in Linux Networking on 31 May 2018 at 12:02 AM EDT. 7 Comments
Adding to the list of new features coming for Linux 4.18 is BPFILTER.

The new BPFILTER capability is a BPF-based packet filtering framework. In its stage for Linux 4.18 this framework is deemed experimental but is striving to provide a Netfilter-compatible implementation by making use of BPF (the Berkeley Packet Filter). Yep, BPF continues getting more powerful.

Along with the BPFILTER framework itself is also an embedded user-mode helper for loading of modules from user-space.

With Linux 4.18 this is the initial framework while ultimately the goal is to replace the existing firewall and packet filtering implementations with this BPF-powered solution. Among the benefits expected for BPFILTER once ready and mature are greater security, easier maintenance, and potential performance improvements via JIT and hardware offloading.

The code is in net-next waiting for the Linux 4.18 merge window that may open this weekend if the Linux 4.17.0 stable release goes out as hoped for on Sunday.

The BPFILTER framework is in addition to many other Linux 4.18 features coming and making us looking forward to June.
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week