se features without ever having to actually touch the data. In contrast, network level approaches incur per-packet cost. Take a look at this <a href=/v1.20/blog/2018/delayering-istio/>blog</a> for some of the performance measurements. (2) It doesn’t require any kernel support, kernel module or a patch and works on standard distro kernels (3) It can run as regular user (no root). In fact, the mechanism can even make it possible to run <a href=https://linuxpiter.com/en/materials/2478>Docker daemon without r