Building a lightning fast Firewall with Java & eBPF
summary
Claims a working Java-based eBPF firewall using the hello-ebpf library to load eBPF programs and BPF maps from Java, attaches at XDP for kernel‑level packet drop, and shows live demos that block HTTPS traffic. Measurements show application‑level drops ~200,000 pkt/s, iptables ~1.8M pkt/s and XDP approaching an order‑of‑magnitude higher. Includes examples: drop‑every‑3rd‑packet XDP hook, file‑open syscall filter via verifier‑safe code, and a simple scheduler implemented and run from eBPF/Java.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 1:16App firewalling fails
- 2:42Traditional firewall limits
- 3:24XDP performance
- 5:29Kernel module challenges
- 6:11eBPF game changer
- 7:57What is eBPF
- 9:21eBPF safety
- 11:30eBPF hooks model
- 13:16eBPF maps
- 15:49eBPF beyond firewalls
- 16:55eBPF future
- 19:52Hello eBPF project
- 21:17Live coding demo
- 26:16Java eBPF firewall
- 28:03Monitoring file access
- 34:32Restricting file access
- 36:19Dropping packets
- 38:52Java eBPF library
- 40:39eBPF kernel fixes
- 41:21Linux scheduler in eBPF
- 45:17Testing schedulers
- 46:23Conclusion
related talks
58mBuild a lightning fast Firewall with Java & eBPF
42mWrite your own Firewall with Java & eBPF
32mDemystifying eBPF - eBPF Firewall from scratch
47mInto the Heart of the eBPF Hive!
36mPanel: Exploring eBPF Use Cases in Cloud-Native Security
33meBPF: exploring use case of BPF kernel infrastructure
37mEfficient and Flexible Virtual Machine Networking Through eBPF
29mBuzzing Across the Cloud Native Landscape with eBPF