We Put an L7 Firewall in the Kernel

The article discusses the development of a kernel-based L7 firewall that makes decisions in the kernel using eBPF and allows users to write policies as JavaScript apps.