WireGuard - Next-Generation Secure Kernel Network Tunnel
Explore WireGuard, a new Linux network tunneling mechanism with formal cryptographic protocol, small codebase, and widespread deployment. Learn about its kernel integration, performance, and ecosystem impact.
Zinc - Minimal Light-weight Kernel Cryptography API
Explore Zinc, a minimal kernel cryptography API for Linux, covering its design, implementation, and optimization strategies for enhanced security and performance.
Filename Encoding and Case-Insensitive Filesystems
Exploring challenges and solutions for case-insensitive file lookups in Linux, focusing on encoding issues and filesystem abstractions for improved user experience.
XArray
Explore XArray's capabilities, conversions from radix trees and IDA, potential replacements for list_head, and future improvements for broader application in Linux kernel development.
OOMD - A Userspace OOM Killer
Explore oomd, a userspace OOM killer that outperforms the Linux kernel OOM killer. Learn about its effectiveness, flexibility, and resource utilization improvements.
Task Migration at Scale Using CRIU
Exploring Google's use of CRIU for efficient container workload migration, addressing challenges, improvements, and future directions in task migration for Linux systems.
SCHED_DEADLINE Desiderata and Slightly Crazy Ideas
Explore SCHED_DEADLINE scheduling policy's current state, upcoming features, and potential improvements. Gain insights into Linux kernel scheduling and real-time systems.
Linux SCTP is Catching Up and Going Above
Exploring SCTP's evolution in Linux: recent improvements, new features, and future developments. Compares SCTP with TCP/UDP and other systems, highlighting its unique capabilities and potential applications.
Clang + Linux
Explore Clang and LLVM for Linux kernel development, covering priorities, tools, and techniques to enhance compilation, debugging, and code analysis processes.
XDP Challenges & Future Work
Exploring future improvements for XDP, including user experience, driver support, performance optimization, QoS handling, and potential extensions to accelerate other parts of the networking stack.
Untrusted File Systems
Exploring secure handling of untrusted filesystems in Linux, addressing challenges and potential solutions for USB sticks, VM images, and unprivileged containers.
Documenting Linux MM for Fun and for Fun
Insights into Linux memory management documentation: benefits, challenges, and future directions. Explores the value of documentation for developers and system understanding.
Linux Kernel VxLan with Multicast Routing for Flood Handling
Explore VxLan multicast routing in Linux kernel, addressing challenges and solutions for dynamic environments. Covers deployment scenarios, patches, and future developments.
LAG and Hardware Offload to Support RDMA and IO Virtualized Interfaces
Exploring LAG implementation for RDMA and virtualized interfaces, focusing on active-backup mode, flow-based active-active mode, and a new active-active mode for virtual functions.
Reworking of KVA Allocator in Linux Kernel
Exploración detallada de las mejoras en el asignador KVA del kernel Linux, abordando problemas de fragmentación y rendimiento con nuevos esquemas de asignación y ubicación de memoria.
Programmable Socket Lookup with BPF
Explore BPF-based socket lookup for efficient packet steering, comparing it to existing methods and discussing implementation challenges, performance impacts, and user-space API usability.
Challenges of the RDMA Subsystem
Explore RDMA subsystem challenges in Linux, covering complex user APIs, DMA models, security, file system interactions, and networking functionality. Gain insights for emerging drivers facing similar issues.
Core Scheduling - Taming Hyper-Threads to Be Secure
Explore CPU vulnerabilities and core scheduling as a solution to keep hyperthreading secure. Learn about implementation, performance impacts, and future directions for this critical security feature.
Red Hat Joins CI Party, Brings Cookies
Red Hat's CKI project transforms kernel testing with continuous integration, expanding to upstream maillists and inviting collaboration. Learn about their CI system, hardware, and reporting methods.
Netfilter Hardware Offloads
Explore hardware offloads in netfilter using flow rule and flow block APIs, covering payload mangling and connection tracking flowtable bypass for improved network performance.
Touch but Don't Look - Running the Kernel in Execute Only Memory
Explore execute-only memory implementation for kernel protection, covering benefits, virtualization techniques, and necessary code adaptations. Learn about enhanced security against control flow attacks and code diversification schemes.