facebook / bpfilter

--- An eBPF -based packet filtering framework. **bpfilter** transforms how you control network traffic by leveraging the power of eBPF technology. This framework elegantly translates filtering rules into optimized BPF programs, bringing unparalleled performance and flexibility to your packet filtering needs. Key features • Quick start • Documentation Key features • **High performance**: utilizes eBPF's near-native performance capabilities • **Low overhead**: minimal resource consumption with maximized efficiency • **Developer-friendly**: clean architecture with clear separation of components **bpfilter** combines three components: a CLI that allows users to define filtering rules in human-readable text, a daemon that converts these rules into efficient BPF programs, and a library that facilitates seamless communication between applications and the filtering subsystem. Want to know more about **bpfilter**? Check the user's guide, the developer documentation, our contributing guide, or watch our latest public talk! Quick start Install **bpfilter** is packaged for Fedora 40+, EPEL 9+ and supports Fedora 40+, CentOS Stream 9+, and Ubuntu 24.04+. The examples below uses Fedora 41. Build from sources Usage The complete documentation is available on bpfilter.io. License **bpfilter** is licensed under GPLv2. You can find the licensing details in the COPYING file. Acknowledgements **bpfilter** was initially designed by Alexei Starovoitov with help from David S. Miller and Daniel Borkmann as a Linux kernel usermode helper, and later improved by Dmitrii Banshchikov.