orwarded to user space, some additional steps like packet validation, protocol policy processing and destination socket searching will be performed. When a sidecar is configured to intercept traffic, the original data path can become very long, since duplicated steps are performed several times.</p><p>Over the past two years, <a href=https://ebpf.io/>eBPF</a> has become a trending technology, and many projects based on eBPF have been released to the community. Tools like <a href=https://cilium.io/>Cilium</a