Blog Archive

2026

Sockets in the Linux Kernel - Part 3: TCP Socket Lookup on Rx2026-01-06

2025

Sockets in the Linux Kernel - Part 2: UDP Socket Lookup on Rx2025-03-02
Sockets in the Linux Kernel - Part 1: L4 Protocol Demultiplexing on Rx2025-01-05

2022

Flowtables - Part 2: IPsec gateway in tunnel-mode2022-08-14
Flowtables - Part 1: A Netfilter/Nftables Fastpath2022-08-08
Routing Decisions in the Linux Kernel - Part 2: Caching2022-07-31
Routing Decisions in the Linux Kernel - Part 1: Lookup and packet flow2022-07-04
Nftables - Demystifying IPsec expressions2022-01-30

2021

Connection tracking (conntrack) - Part 3: State and Examples2021-08-07
Connection tracking (conntrack) - Part 2: Core Implementation2021-04-11
Connection tracking (conntrack) - Part 1: Modules and Hooks2021-04-04

2020

Nftables - Packet flow and Netfilter hooks in detail2020-05-29
Nftables - Netfilter and VPN/IPsec packet flow2020-05-29