Bpfilter Installation

Bpfilter Installation

[Tiffany Kalin]

Hi,

I am interested in bpfilter and I wanted to play around with it. I
installed the latest Linux kernel (make && make modules_install &&
make install) with BPFILTER set to yes.
Following this video: https://www.youtube.com/watch?v=AfgwVya9Cog
I tried to run the bpfilter.ko, but it did not work. I could not do
modprobe nor insmod for bpfilter. Is there something I'm missing in
order to have bpfilter.ko run? Or is there a new way to run bpfilter?
Any guidance/help would be appreciated!

Thank you,
Kalin

Re: Bpfilter Installation

[Alexei Starovoitov]

On Mon, Apr 13, 2020 at 02:22:07PM -0600, Tiffany Kalin wrote:
> Hi,
> 
> I am interested in bpfilter and I wanted to play around with it. I
> installed the latest Linux kernel (make && make modules_install &&
> make install) with BPFILTER set to yes.
> Following this video: https://www.youtube.com/watch?v=AfgwVya9Cog
> I tried to run the bpfilter.ko, but it did not work. I could not do
> modprobe nor insmod for bpfilter. Is there something I'm missing in
> order to have bpfilter.ko run? Or is there a new way to run bpfilter?
> Any guidance/help would be appreciated!

I don't think youtube is a great way to communicate on the mailing list,
since it's impossible to comment inline.
please explain in an email what your expectations for bpftiler are and
what you want to achieve.
Thanks

Re: Bpfilter Installation

[Jakub Kicinski]

On Mon, 13 Apr 2020 14:22:07 -0600 Tiffany Kalin wrote:
> Hi,
> 
> I am interested in bpfilter and I wanted to play around with it. I
> installed the latest Linux kernel (make && make modules_install &&
> make install) with BPFILTER set to yes.
> Following this video: https://www.youtube.com/watch?v=AfgwVya9Cog
> I tried to run the bpfilter.ko, but it did not work. I could not do
> modprobe nor insmod for bpfilter. Is there something I'm missing in
> order to have bpfilter.ko run? Or is there a new way to run bpfilter?
> Any guidance/help would be appreciated!

Hey! I think that video was showing some out of tree patches and hacks.
At the time there was hope that bpfilter will become a commonly used
iptables to BPF translation layer, but unfortunately the effort haven't
gone far beyond laying the groundwork. Maybe you are the person who
will take it forward? :)

FWIW there are also projects for doing such translation in user space,
there are patches for OvS to generate XDP programs, libkefir from
Netronome, and I think Red Hat was also working on something?