Kernloom Throughput / XDP Performance
| Stack / Mode | CPU Reference | Throughput (Mpps) | Throughput (packets/s) | Speedup vs L7 WAF (TLS+WAF) |
|---|---|---|---|---|
| Kernloom (XDP, per-IP token bucket + telemetry) | 1 core | 5–15 | 5,000,000–15,000,000 | 25×–300× |
| Kernloom (XDP, per-IP token bucket + telemetry) | 4 cores | 20–60 | 20,000,000–60,000,000 | 100×–1,200× |
| Kernloom (XDP, per-IP token bucket + telemetry) | 8 cores | 40–120 | 40,000,000–120,000,000 | 200×–2,400× |
| Kernloom (XDP, per-IP token bucket + telemetry) | 16 cores | 80–240 | 80,000,000–240,000,000 | 400×–4,800× |
| L7 WAF baseline (TLS termination + WAF) | 2 vCPU | 0.05–0.20 | 50,000–200,000 | 1× |
Assumption to express L7 in packets/s: ~10 packets per HTTP transaction (request+response).