Reimplementing pf as an eBPF/XDP dataplane on Linux

Software Development, OS & Low-Level Tech, AI & Machine Learning(blog.nfsensei.org)view on HackerNews

pfpfSenseeBPFXDPLinuxfirewallpacket processingRustBPF mapsstateful firewallNATnormalization

Author: 882542F3884314B

Date: 7/11/2026

Article Summary:

This article describes an attempt to express the full pf configuration language and its stateful semantics within the XDP (eXpress Data Path) model on Linux, using a userspace compiler and a Rust/eBPF dataplane.