Laurin Brandner implemented an HTTP parser using #eBPF! When used to build an in-kernel HTTP cache, it improves throughput by up to 3x at high incoming rates.
It uses a deterministic finite automaton (DFA) to parse HTTP/1.1 and HTTP/2 and integrates with existing BPF programs using freplace. It can run on HTTPS traffic by attaching at the socket level and leveraging kTLS.
Slides: https://lpc.events/event/20/contributions/2428/attachments/2064/4781/Beeper.pdf
Stream: https://youtube.com/live/UQCglEwWwT4
Paper: https://arxiv.org/pdf/2605.31084
Code: https://github.com/lerboe/beeper