Viewing profile — Tcc1

He probably spent more time figuring out if the suggestions are usable than he would have needed to just implement those manually.

Why does this need nf_queue? Wouldn't it be sufficient to directly filter the connect syscalls using eBPF? Dropping packets using netfilter makes many applications wait for a timeo…

I especially like the aggregator functions, it allows to select an additional dimension of data.