Nftables Why and how?

Iptables and Netfilter were introduced in 2001 along with Linux 2.4 as  the full  layer for firewall. The functionalities and the codes changed quite a lot during this decade, but nothing like what has been done with nftables. The motivation for this change is to...

NDIV: a low overhead network traffic diverter

NDIV is a young, very simple, yet efficient network traffic diverter. Its purpose is to help build network applications that intercept packets at line rate with a very low processing overhead. A first example application is a stateless HTTP server reaching line rate...

What’s new in Nftables

Nftables is a new packet filtering framework which aims at replacing iptables. It has been developed by the Netfilter team who wanted after 10 years of development to get rid of iptables. After a successful introduction in the 3.13 kernel and more than one year in...

Amateur practice of ethernet drivers

This talk will  focus on various highlights of ethernet drivers and their maintenance as the speaker was able to practice for several years to the Linux...

Kernel packet capture technologies

Capturing packets running on the wire to send them to a software doing analysis seems at first sight a simple tasks. But one has not to forget that with current network this can means capturing 30M packets per second. The objective of this talk is to show what methods...