> I need to add some special logic to firewall (it is simple eBPF programs for > DDoS mitigation). > Currently we use bare DPDK for launching it. > > But it will be much better to use it with VPP. > Are there any plans about adding such feature (something like XDP in Kernel)? > > If there are no such plans, we want to start developing. Will it have a > chance to be merged?
I don't know of any plans to be able to run eBPF programs within VPP. If you have an eBPF program that you want to run in kernel, DPDK and VPP and you think of VPP as a generic platform for running networking code, adding a eBGP engine might make sense. Likewise if you have a program that you need to run on hardware and software platforms then P4 is good for that. Both eBPF and P4 are DSLs where you are much more limited in what you can do, compared to implementing a network function in a general purpose language like C on a general purpose platform. It's as always a tradeoff. Best regards, Ole
signature.asc
Description: Message signed with OpenPGP
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#18917): https://lists.fd.io/g/vpp-dev/message/18917 Mute This Topic: https://lists.fd.io/mt/81308758/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
