TCX a new framework for fast cache line skb processing over per cpu queue, with attaching multiple TC proxgrams without the priority based attachment for legacy TC subsystem.
If the DNSObelisk framework is running with the node agent injecting DNS exfil security programs with least priority it should support attachment to TCX based TC hooks for list style TC prior to cilium attach CNI to run core security programs.
For multi CNI ofloaded or TC offload, still the security programs must be always first in the kernel datapath and must immediately post dev_queue_xmit over skb when enter over the TC control subsystem.
TCX a new framework for fast cache line skb processing over per cpu queue, with attaching multiple TC proxgrams without the priority based attachment for legacy TC subsystem.
If the DNSObelisk framework is running with the node agent injecting DNS exfil security programs with least priority it should support attachment to TCX based TC hooks for list style TC prior to cilium attach CNI to run core security programs.
For multi CNI ofloaded or TC offload, still the security programs must be always first in the kernel datapath and must immediately post dev_queue_xmit over skb when enter over the TC control subsystem.