BPF Documentation¶

This directory contains documentation for the BPF (Berkeley PacketFilter) facility, with a focus on the extended BPF version (eBPF).

This kernel side documentation is still work in progress. The maintextual documentation is (for historical reasons) described inDocumentation/networking/filter.rst, which describe both classicaland extended BPF instruction-set.The Cilium project also maintains aBPF and XDP Reference Guidethat goes into great technical depth about the BPF Architecture.

The primary info for the bpf syscall is available in theman-pagesforbpf(2).