Open
Description
Currently we only support programs attached to a Socket.
However the list of types of programs that ebpf supports is huge https://docs.kernel.org/bpf/libbpf/program_types.html and some of them might touch areas of the verifier that a network filter wouldn't.
I propose we extend the number of supported programs as much as we can.
Roughly we could refactor the FFI layer to introduce a type of executor per program type.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Metadata
Assignees
Labels
No labels