Re: [PATCH RFC 3/3] netfilter: nf_tables: add BPF-based jit infrastructure

On Tue, Feb 20, 2018 at 11:53:55AM +0100, Pablo Neira Ayuso wrote:

Hi David,

On Mon, Feb 19, 2018 at 01:53:34PM -0500, David Miller wrote:

quoted

I'm very suprised that this is generating classical BPF filters.

We have native eBPF and that is what anything generating new code
should be using, rather than the 20+ year old CBPF.

I'm not the only one that likes 90s interfaces after all ;-)

I'll explore how to generate eBPF code in the next patchset version.

from the user space please...
it was already explained few times in this thread and in other
threads (kprobe, seccomp, etc related) over the last years why
it's not ok to generate eBPF from the kernel.