Cloudflare documents eight years of moving its edge onto eBPF and off a vendor-locked kernel bypass stack

Sources: ebpf.io post, HN discussion
Summary: The post, dated 2026-08-27, is the first part of an account of Cloudflare replatforming its edge data plane onto eBPF and XDP. It states why XDP was chosen over DPDK, gives the CPU cost under attack, and names the one out-of-tree kernel patch the migration retired. It reached Hacker News only in this window.
Why it matters: It is a rare production account of a kernel bypass decision with the operating numbers attached rather than vendor figures.
Follow-up: The remaining parts of the series.