Recent submissions

Comment · 2 months ago
Yeah fair point. I should have been more precise. AF_XDP with ZC bypasses the kernel networking stack and the NIC DMA's directly into UMEM and so in that sense it absolutely is a kernel bypass.

The difference I was getting at vs DPDK is that the kernel NIC driver/NAPI/XDP path is still involvd. With DPDK the userspace PMD is effectively driving the NIC and accessing the queues directly.

either way, it's great and everyone should use it :) that is assuming they have a use case for it. The use-cases are perhaps somewhat limited as it also bypasses the kernel tcp-ip stack, so you gotta do a lot yourself.

Comment · 2 months ago
I think you're correct. Not really aware of any real limitations, other than it's slightly slower than dpdk (it's not a complete bypass), but at a much easier ease of use.
Comment · 2 months ago
Comment · 2 months ago
That's what the veth examples are using
Comment · 2 months ago
you can use generic af_xdp which sits at the TC layer. Just get a bit less performance.
Comment · 2 months ago
Ah thanks!!
Comment · 3 years ago
Built with WASM, in browser SSH and Database (Mysql and Postgres) client. No need for VPN and can use your SSO creds to log in to server.
Comment · 3 years ago
Also check out https://docs.border0.com/docs. Super easy to get going, and supports HTTP(s), SSH and Database protocols such as mysql and postgres. Ideal for private resources, as it has a nice policy to control who should have access to what, when and where. Finally you can use Google and Github for authentication.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton