> Will the bpf JIT changes be done in time for 6.6? I have no doubt > that "pfctl -p /dev/bfp" can be made to work in time but for a truly > performant firewall we will need bpf JIT.
I wrote a vax BPF jit as a simple exercize some time ago, so all you
really need now is to implement vax-to-${ARCH} jit on an MD basis. This
should be very easy to do as long as BPF does not get extended to use
floating-point values.
