How eBPF Intercepts Packets Before Kernel Routing
eBPF programs redirect packets at XDP or TC hooks before the kernel routing table is consulted, causing routing confusion when troubleshooting.
Tag: OpenWRT traffic monitoring
OpenWrt Traffic Monitor: Read Raw Kernel Data First
Skip dashboards for unreliable counts. Start with /proc/net/dev and tc qdisc, then layer nlbwmon for per-IP accountability on OpenWrt routers.
XDP Firewall on OpenWRT: Early Packet Drop at Line Rate
XDP intercepts packets in the driver before the kernel allocates buffers, enabling high-volume DDoS mitigation and load balancing with minimal CPU cost.
OpenWrt Packet Steering on Multi-Core Routers: When It Helps
Packet steering spreads network load across CPU cores on multi-core routers, but only helps if one core is bottlenecked. Check /proc/interrupts first to decide.
How Nlbwmon Maps OpenWrt Traffic to Devices
luci-app-nlbwmon attributes OpenWrt traffic to IP and MAC addresses, explains apk versus opkg installs, and helps troubleshoot missing or misleading totals.