News › networking
By Zayden R., July 25, 2026
Daniel Borkmann presented updates on netkit at the 2026 Linux Summit, highlighting zero-copy packet receipt in VMs. He also proposed using BPF for live-patching user-space applications, a concept that could transform system maintenance and performance.
At the 2026 Linux Filesystem, Memory-Management, and BPF Summit, Daniel Borkmann shared significant updates on netkit, a subsystem designed to enhance networking efficiency for virtual machines on Linux. Netkit now supports zero-copy packet receipt into a VM within a network namespace. This progress marks a notable step in optimizing network performance for virtualized environments, potentially reducing overhead and increasing data throughput.
Borkmann's session didn't end there. With time to spare, he introduced an intriguing concept: employing BPF (Berkeley Packet Filter) to live-patch user-space applications. While BPF has been historically used for network filtering and performance monitoring within the kernel, its extension into user-space applications could revolutionize system maintenance. The ability to apply patches on-the-fly without interrupting running processes is something sysadmins have long awaited.
The idea is still in its nascent stages, but if successful, it could offer a more seamless and efficient approach to application updates and security patches. By leveraging BPF's flexibility, developers might be able to address bugs and vulnerabilities dynamically, minimizing downtime and enhancing security.
Overall, both advancements in netkit and the potential for BPF in user-space signal a promising direction for Linux networking and system management. These developments could lead to more robust and efficient environments for both enterprise and personal computing.