On 3 Jun 2019, at 6:19, Maciej Fijalkowski wrote: > In case where multiple xsk sockets are attached to a single interface > and one of them gets detached, the eBPF maps and program are removed. > This should not happen as the rest of xsksocks are still using these > resources.
I'm not seeing that behavior - each xsk holds it's own reference to xsks_maps, so when the map descriptor is closed, it doesn't necessarily delete the map. There's no refcount on the bpf program though; so the socket should not be trying to remove the program - that should be done by the application. -- Jonathan