From: Pavel Popa <pashinho1990@xxxxxxxxx> Date: Thu, 7 Feb 2019 09:34:13 +0100 > Well, I thought about this for some time. The main problem is, as I > already experimented with, the bpf verifier. It does effectively > prevent sure bugs and kernel panics, but it's also full of false > positives (e.g. parsing optional headers with tlv format is a huge > pain). My use-case is a dataplane for tunnel encap/decap, keeping > track of the right sessions and their accounting, packet > classification, routing, and some other smaller things. In my view, > clearly it's almost impossible doing all of this in XDP, therefore the > choice of AF_XDP. I hope this makes sense. We should make XDP align to your needs in this situation, please work with us so that we can make it so. Thanks.