Essays
Conquering the Linux Network Stack: Decapsulating Packets with eBPF at 6 Mpps+
When Selectel's transition to VXLAN threatened to break their traffic analysis system, they turned to eBPF to decapsulate packets at line rate. This article walks through the Linux network stack internals, eBPF hook points, and a production solution handling 6 million packets per second.