Re: Interesting new packet filtering language?

[Denis Ovsienko <denis () ovsienko info>]

On Thu, 8 Oct 2026 00:35:24 -0700
Guy Harris <gharris () sonic net> wrote:

>       
> https://ebpf.github.io/2026/slides/kunai-toward-a-verifier-safe-layered-dsl-for-nested-encapsulation-packet-filtering-on-ebpf.pdf

The slides are dated September 2026, but page 4 refers to libpcap
1.10.5 (August 2024).  The table on page 15 says:

F9
Target: Geneve -> inner IPv4
Kunai: v
pcap-filter: -

This likely means either the test was not performed correctly, or the
"geneve" primitive does not work as documented.

One other thing that looks off are the hard-coded "@outer" and "@inner",
which leaves it open to interpretation how things are supposed to work
with X-in-X, X-in-X-in-X, X-in-Y-in-X, etc.

Kunai provides an interesting new perspective on packet filtering using
eBPF, but this does not mean the solution space of BPF has already been
implemented correctly and completely.

-- 
    Denis Ovsienko
_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s