I am trying to understand the resistance here. There are ingress/egress hooks for most of the layers - tc, netfilter, and even within bpf APIs. Clearly there is a need for this kind of symmetry across the APIs, so why the resistance or hesitation for XDP?
Stacking programs on the Rx side into the host was brought up 9 revisions ago when the first patches went out. It makes for an unnecessarily complicated design and is antithetical to the whole Unix/Linux philosophy of small focused programs linked together to provide a solution. Can you elaborate on your concerns?