An L7 Firewall in the Kernel
Summary
An in-kernel L7 firewall built with eBPF and policy authored in JavaScript. The piece explains the motivation, architecture (XDP-based decision at the wire), performance benefits, and safety considerations, including HPACK handling and fragmentation. It also covers deployment, observability, and future roadmap.