Quentin is a senior software engineer specializing in Linux kernel networking and BPF development. He is a core contributor to the bpfilter project, an initiative to modernize Linux packet filtering by combining the accessibility of iptables with the performance of BPF. His work spans kernel networking internals, Netfilter hooks, and systemd integration. Based in France, Quentin is passionate about building efficient, maintainable systems-level software.

Presentations

23x

bpfilter: an eBPF-based firewall for fast packets filtering!

iptables and nftables are the standard for Linux packet filtering: well-documented and widely understood. But at high bandwidth, BPF is the fast alternative, although it means writing C and fighting the BPF verifier.

bpfilter bridges the gap: an iptables-like DSL that compiles to BPF bytecode.

This hands-on talk covers Linux filtering tradeoffs, introduces bpfilter, and demos real-world usage from writing rules to debugging.

See Presentation
22x

A simpler and faster firewall with bpfilter

What if your firewall could be faster while using fewer resources? Coupling widely available solutions (nftables, iptables) with bleeding-edge technologies (BPF), bpfilter aims to simplify firewalls and bring better performance to everyone.

See Presentation
21x

bpfilter: a BPF-based packet filtering framework

bpfilter, once dormant, has been revived as a userspace daemon available on GitHub. It allows dynamic generation of packet-filtering BPF programs with a user-friendly interface. This presentation provides an overview of bpfilter, covering front-end clients, communication with the daemon, BPF program support, bytecode manipulation, and recent features, including benchmark results.

See Presentation