BPF – in-kernel virtual machine 1! BPF is • Berkeley Packet Filter • low level instruction set • kernel infrastructure around it • interpreter • …