Cloudflare documents eleven Linux networking gaps it closed with eBPF

Sources: primary, discussion
Summary: The post walks through eleven cases where a standard Linux networking mechanism did not meet Cloudflare's requirements, and names the tool built to replace it in each. The results include the sk_lookup hook contributed upstream and the open-source xdpcap, Tubular and ebpf_exporter.
Why it matters: The stated reasoning is reusable by anyone weighing eBPF against iptables, TPROXY or a kernel module.