Build a lightning fast Firewall with Java & eBPF
summary
Claims a Java library called hello-ebpf lets Java apps compile and load eBPF programs (via libbpf and Project Panama) to the kernel, attach an XDP hook to the NIC, and enforce rules with maps and ring buffers. Demo builds a packet filter from Java, drops every third packet at line rate (benchmarks discuss millions to ~10M pkts/s saturating 10Gb), requires root, uses JIT-compiled eBPF, and warns about verifier/CVE risks.
AI-written summary · about
chapters (10)
- 0:00The problem: packet handling
- 1:54Traditional firewall options
- 6:50Introduction to eBPF
- 8:35How eBPF works
- 14:00Sharing data with eBPF maps
- 18:03eBPF use cases and security
- 21:52Java and eBPF integration
- 25:38Firewall demo and live coding
- 37:52Deep dive into XDP
- 45:11Conclusion and Q&A
related talks
47mBuilding a lightning fast Firewall with Java & eBPF
42mWrite your own Firewall with Java & eBPF
32mDemystifying eBPF - eBPF Firewall from scratch
47mInto the Heart of the eBPF Hive!
36mPanel: Exploring eBPF Use Cases in Cloud-Native Security
33meBPF: exploring use case of BPF kernel infrastructure
29mBuzzing Across the Cloud Native Landscape with eBPF
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools