Skip to content

Commit e725e62

Browse files
qdeslandesqmonnet
authored andcommitted
bpfilter: remove bpfilter
bpfilter was supposed to convert iptables filtering rules into BPF programs on the fly, from the kernel, through a usermode helper. The base code for the UMH was introduced in 2018, and couple of attempts (2, 3) tried to introduce the BPF program generate features but were abandoned. bpfilter now sits in a kernel tree unused and unusable, occasionally causing confusion amongst Linux users (4, 5). As bpfilter is now developed in a dedicated repository on GitHub (6), it was suggested a couple of times this year (LSFMM/BPF 2023, LPC 2023) to remove the deprecated kernel part of the project. This is the purpose of this patch. [1]: https://lore.kernel.org/lkml/[email protected]/ [2]: https://lore.kernel.org/bpf/[email protected]/#t [3]: https://lore.kernel.org/lkml/[email protected]/ [4]: https://dxuuu.xyz/bpfilter.html [5]: linuxkit/linuxkit#3904 [6]: https://github.com/facebook/bpfilter Signed-off-by: Quentin Deslandes <[email protected]> Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Alexei Starovoitov <[email protected]>
1 parent 5ba3bba commit e725e62

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

src/feature.c

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -426,10 +426,6 @@ static void probe_kernel_image_config(const char *define_prefix)
426426
{ "CONFIG_BPF_STREAM_PARSER", },
427427
/* xt_bpf module for passing BPF programs to netfilter */
428428
{ "CONFIG_NETFILTER_XT_MATCH_BPF", },
429-
/* bpfilter back-end for iptables */
430-
{ "CONFIG_BPFILTER", },
431-
/* bpftilter module with "user mode helper" */
432-
{ "CONFIG_BPFILTER_UMH", },
433429

434430
/* test_bpf module for BPF tests */
435431
{ "CONFIG_TEST_BPF", },

0 commit comments

Comments
 (0)