af808bd826
xdp socket support (AF_XDP) is the new way of implementing high
performance networking on linux. on arch linux and debian this is
already enabled (checked via the links from the nixos manual).
moreover, these flags are suggested by the bpf documentation at cilium:
https://cilium.readthedocs.io/en/latest/bpf/#compiling-the-kernel
additionally the flag `BPF_JIT_ALWAYS_ON` on was suggested to help
spectre attack mitigations:
|
||
---|---|---|
.. | ||
cpu-cgroup-v2-patches | ||
bridge-stp-helper.patch | ||
common-config.nix | ||
export_kernel_fpu_functions_4_14.patch | ||
export_kernel_fpu_functions_5_3.patch | ||
gen-kheaders-metadata.patch | ||
generate-config.pl | ||
generic.nix | ||
genksyms-fix-segfault.patch | ||
hardened-config.nix | ||
linux-4.4.nix | ||
linux-4.9.nix | ||
linux-4.14.nix | ||
linux-4.19.nix | ||
linux-5.2.nix | ||
linux-5.3.nix | ||
linux-hardkernel-4.14.nix | ||
linux-libre.nix | ||
linux-mptcp-94.nix | ||
linux-mptcp-95.nix | ||
linux-rpi.nix | ||
linux-testing-bcachefs.nix | ||
linux-testing.nix | ||
mac-nvme-t2.patch | ||
manual-config.nix | ||
modinst-arg-list-too-long.patch | ||
mptcp-config.nix | ||
p9-fixes.patch | ||
patches.nix | ||
perf.nix | ||
randstruct-provide-seed.patch | ||
tag-hardened.patch | ||
update.sh |