On 11/27/19 10:18 PM, Jason Wang wrote: > We try to follow what NFP did by starting from a fraction of the whole > eBPF features. It would be very hard to have all eBPF features > implemented from the start. It would be helpful to clarify what's the > minimal set of features that you want to have from the start. Offloading guest programs needs to prevent a guest XDP program from running bpf helpers that access host kernel data. e.g., bpf_fib_lookup