OpenBSD PF-based firewalls suffer differently from denial of service attacks
In my opinion Linux and eBPF is considerably better and more flexible when it comes to firewalling and deep packet inspection based blocking.<p>The mentioned use case perfectly fits the eBPF XDP module&#x27;s feature set, and could easily be mitigated with the LPM trie offered by the kernel.<p>I wish that in those regards BSD maintainers would start to cooperate more with Linux, because everybody benefits from cross-kernel compatibility when it comes to eBPF.<p>I always admired the BSD maintainers, back in the days they were very innovative but I always have the feeling that at some point when their innovations take off they just stop following up with it due to either very opinionated views or lack of interest. Especially with the ongoing eBPF community.