Wasn't familiar with BPF programs until I saw your comment, and subsequently went on a search trail. Really like what I've read. BPF and XDP provide so much utility!

I thought Jessie had a good overview[0] of BPF

[0] https://blog.jessfraz.com/post/linux-observability-with-bpf/