JEDEC’s new UFS File‑Based Optimization (FBO) 1.0 standard aims to improve flash storage performance by defragmenting LBA ranges tied to specific files, but a Xiaomi engineer’s patch proposal to implement it in Linux was sharply rejected by kernel veteran Christoph Hellwig, who called the idea fundamentally flawed.
Using eBPF to bypass traditional bridge, netfilter, and routing steps, this article demonstrates how container network packet forwarding can be accelerated, reducing receive and transmit latency by around 40‑82%, with detailed perf‑ftrace analysis, code examples, and performance comparisons of three forwarding modes.
Linus Torvalds warns kernel developers against waiting until the last days of the two‑week merge window to submit patches for Linux 6.0, urging early preparation to reduce review pressure and improve code quality.
DirtyPipe (CVE‑2022‑0847) is a high‑severity Linux kernel flaw that lets attackers arbitrarily overwrite any readable file via an uninitialized pipe‑buffer flag, enabling privilege escalation on Android and other systems by patching shared libraries, bypassing SELinux, loading malicious modules, and ultimately gaining root, highlighting urgent need for patches and integrity protections.
This article deeply explores the Linux kernel's handling of JDK NIO file reads and writes, detailing the role of page cache, radix trees, buffered versus direct I/O, prefetch algorithms, dirty‑page write‑back mechanisms, and the key sysctl parameters that control performance and data safety.
This article deeply explores JDK NIO's file reading and writing mechanisms, revealing how Buffered and Direct IO interact with Linux's page cache, the kernel's radix tree, prefetch algorithms, and dirty page management, while providing practical code examples and performance insights for developers.
Linux rwsem is a read‑write semaphore that lets multiple readers or a single writer hold the lock, using a count field, owner pointer, optimistic‑spin queue (osq), and protected wait list; it provides fast, medium, and slow acquisition paths with handoff and optimistic spinning to reduce sleep latency compared to mutexes and spinlocks.
The article explains how Uber replaced CPU quota enforcement with cpusets (CPU pinning) for stateful workloads, reducing P99 latency, improving performance consistency, and saving about 11% of cores across the cluster by eliminating throttling.
This article explains how Linux kernel version numbers have evolved—from Linus Torvalds’s early simple increment scheme to the modern three‑component “major.minor.revision” format—detailing the meaning of each segment, the role of patch and release‑candidate identifiers, and how to identify kernel versions using uname.
The article explains how the Linux kernel implements the TCP three‑way handshake, detailing server listen queue allocation, client connect port selection and SYN transmission, SYN‑ACK processing, state transitions, request‑socket management, full‑connection queue handling, and the final accept call, plus tuning tips.
Netfilter, the Linux kernel’s packet‑processing framework, uses a series of hook points and the NF_HOOK macro to let user‑space tools like iptables register callback functions that inspect, modify, or drop packets, with detailed structures for tables, chains, rules, priorities, and connection tracking.
This guide walks you through checking your current CentOS 8 environment, downloading the Oracle‑provided centos2ol.sh script, executing it to replace packages and switch kernels, and verifying the successful migration to Oracle Linux Server with the Unbreakable Enterprise Kernel.
pwru, Cilium’s eBPF‑based packet tracing utility, offers fine‑grained network diagnostics; this guide covers kernel requirements, installation steps, command‑line options, real‑world iptables drop detection examples, and an in‑depth look at its eBPF map configuration and perf‑event output mechanism.
This comprehensive guide explains Linux kernel performance profiling—both on‑CPU and off‑CPU—by stressing the need to target the critical 3 % of code, covering throughput, latency and power metrics, scalability laws, flame‑graph visualizations, perf and eBPF tools, lock‑contention analysis, and further reading recommendations.
This article introduces pwru, Cilium’s eBPF‑based network packet tracing utility, covering installation prerequisites, command‑line options, real‑world debugging scenarios, and the underlying implementation that leverages kprobes, eBPF maps, and perf events to filter and display packet data.
This article provides a comprehensive overview of the Linux kernel, explaining its purpose, different kernel architectures (microkernel, monolithic, hybrid), file locations, loadable modules, and offers practical learning advice and resource recommendations for anyone seeking to grasp operating‑system fundamentals.
Researchers dissect the DirtyPipe (CVE‑2022‑0847) Linux kernel flaw affecting Android, explaining its uninitialized flag bug in splice, the patch changes, and detailed exploitation techniques that modify read‑only .so files to achieve arbitrary writes, bypass SELinux, and ultimately obtain root privileges.
The article explains Linux’s Related Thread Group (RTG) mechanism—its struct definition, default Android grouping, core‑selection logic that boosts whole groups to big‑core clusters, load‑aggregation for DCVS frequency decisions, and the newer busy‑hysteresis feature that delays low‑power entry to improve performance and power efficiency.
The Linux kernel’s mutex is a sleeping lock that serializes access by sleeping threads, enforces strict ownership rules, uses a state flag with a wait list and per‑CPU optimistic spin queue, offers APIs like mutex_init, lock, unlock and trylock, and employs handoff and MCS‑style spinning to improve performance, with OPPO’s team optimizing it to reduce UI jank.
This article explains how the Linux kernel’s likely and unlikely macros, which wrap GCC’s __builtin_expect, guide branch prediction to improve cache utilization and pipeline efficiency, and demonstrates their impact with sample code and assembly analysis.
This guide explains how to configure VSCode with Remote‑SSH and GNU Global to edit and navigate large Linux kernel source code on a powerful remote Linux server, overcoming local machine performance limits and platform dependencies for a smooth, scalable development experience.
The article delivers a comprehensive, code‑level examination of Linux’s schedutil (sugov) CPU‑frequency governor, detailing its architecture, key data structures, registration with the cpufreq core, utilization‑driven frequency calculation (including iowait boost and limit handling), and the start‑stop lifecycle, while noting its default status and remaining mobile‑platform challenges.
BUS DCVS dynamically scales DDR bus frequency and voltage using bandwidth‑monitor (bw_hwmon) and memory‑latency (memlat) governors within the Linux devfreq framework, aggregating votes from CPU, GPU, and other masters to balance performance and power across varied workloads such as audio playback and high‑definition video streaming.
Arnd Bergmann's new patch lets the Linux kernel default to the GNU11 dialect, enabling modern C99/C11 features, with Linus Torvalds' backing, and the change is set to be tested in the upcoming v5.18 release.
The Linux kernel community is debating moving from the outdated C89 standard to a modern C standard—likely C11—for the upcoming 5.18 release, driven by bug fixes, macro safety concerns, and support from key developers.
This comprehensive guide walks through the fundamentals of process scheduling in operating systems, covering scheduling concepts, OS classifications, process types, priority mechanisms, preemptive vs cooperative models, design goals, classic algorithms such as FCFS, SJF, RR, MLFQ, and the evolution of Linux schedulers from O(n) and O(1) to the modern CFS, complete with code excerpts and practical examples.
The 2021 Linux kernel saw a surge of new features and hardware support but recorded fewer commits and lines of code than previous years, with detailed Phoronix statistics highlighting author contributions, code churn, and the impact of release schedules.
This article explains the purpose of the TCP RST flag, how the kernel and application layers detect it, the various scenarios that trigger RST, why an RST may not terminate a connection, and the security implications of RST attacks.
The article delves into Linux 5.10.61’s CFS task placement code, explaining the Energy‑Model framework, key data structures, and energy calculations, then walks through select_task_rq_fair’s wake‑up, fork, and exec paths, detailing EAS CPU selection, wake‑affine logic, fast and slow CPU‑selection algorithms, and how they balance performance with power on heterogeneous mobile platforms.
This article explores the evolution of BPF from its origins as a packet‑filtering mechanism to the modern eBPF engine, detailing its architecture, security and performance benefits, core features such as hooks, maps and helper functions, and real‑world cloud‑native use cases like Cilium, Falco and kubectl‑trace.
This article introduces eBPF as a register‑based virtual machine inside the Linux kernel, explains its non‑Turing‑complete design, shows how programs are loaded, verified, and attached to events, and provides a complete C example that counts TCP, UDP, and ICMP packets on a loopback interface.
This article explains how CPUs receive interrupt numbers through hardware, exceptions, or the INT instruction, describes the structure and purpose of the Interrupt Descriptor Table, and details the stack operations and control‑flow steps the processor performs to handle and return from an interrupt.
eCryptfs is a Linux kernel‑integrated stacked filesystem that encrypts both file names and contents using per‑file symmetric keys protected by passphrase‑or public‑key‑encrypted key wrappers, managed by a user‑space daemon and kernel keyring, with Ubuntu installation via ecryptfs‑utils, mount commands, and a read/write flow that incurs performance overhead and cache‑based security risks.
This article dives deep into the Linux kernel implementation of the TCP three‑way handshake, explaining the roles of listen, connect, SYN/ACK processing, queue management, timers, and accept, while providing concrete code snippets and diagrams to help backend engineers master the underlying mechanics.
This article explains the inner workings of KernelAddressSanitizer (KASAN) in the Linux kernel, covering how to enable it, the shadow‑memory mechanism, redzone handling for heap, global and stack allocations, and how to interpret the detailed KASAN bug reports generated at runtime.
At the recent Linaro Connect virtual conference, Linux kernel maintainer Miguel Ojeda, a Google employee, detailed the ongoing Rust for Linux project, noting existing RFC patches for Rust infrastructure and a basic virtual driver, the progress of three compiler back‑ends, and the roadmap toward integrating Rust into the kernel.
Linus Torvalds publicly condemned a GitHub merge in a Linux kernel pull request, explaining his long‑standing opposition to GitHub’s pull‑request workflow, the importance of proper PR signing, and the conditions under which such contributions may be accepted.
Linus Torvalds criticizes the use of GitHub’s merge interface for Linux kernel contributions, arguing that its commit messages lack essential details such as what is being merged, why, and proper author attribution, and he emphasizes the need for signed, well‑documented PRs despite his past reluctance to use GitHub.
dm‑verity is a Linux device‑mapper target that protects a data partition’s integrity by using a compile‑time hash‑tree stored on a separate hash device, with Android employing it for verified boot; user‑space creates the dm device, loads the verity table, activates it, while the kernel’s dev_create, table_load, and suspend handlers set up mapped_device structures and enforce per‑block hash verification during I/O.
Linus Torvalds lambasts GitHub’s merge interface as generating useless commit messages while still merging Paragon’s NTFS driver, and Lenovo announces a new end‑to‑end PaaS service that bundles hardware, software and support into a subscription model.
This article explains the principles behind Linux's epoll mechanism, how IO multiplexing enables a single thread to manage many file descriptors efficiently, the role of non‑blocking sockets, and why epoll outperforms select and poll for high‑concurrency network services.
This article explains how eBPF evolved from classic packet filtering to a powerful, programmable kernel virtual machine that enables high‑performance networking, hardware offload, and flexible security, making it increasingly vital for operators, system administrators, and enterprise solution providers.
This article examines common TCP handshake anomalies in backend systems, detailing how client port exhaustion and server-side connection queue overflows cause packet loss and latency spikes, while providing kernel-level insights and practical configuration strategies to optimize network performance and ensure reliable service availability.
The Intelligent Power Allocation (IPA) governor, introduced in Linux kernel 4.2, uses a PID‑based closed‑loop controller and a dynamic power allocator to distribute sustainable power among CPU, GPU and other IP cores, maximizing performance while respecting temperature limits, but requires careful PID tuning and device‑tree configuration.
This article introduces the fundamentals of BPF and its extended version eBPF, explains their kernel‑resident virtual machine architecture, demonstrates simple packet‑filtering examples, outlines the eBPF program lifecycle, describes key BPF system‑call commands, and surveys the various eBPF map types used for efficient data handling in Linux.
This article explains how U‑Boot loads the device‑tree blob into memory, transfers its address via the r2 register using either bootm_header_t or legacy boot parameters, and describes the kernel’s two‑stage parsing process that validates, scans, and unflattens the tree into device nodes.
The Linux cpufreq framework, organized into generic, driver, and governor layers, manages dynamic frequency and voltage scaling for big‑LITTLE CPUs by exposing sysfs controls, using policies like Interactive (periodic sampling) and Schedutil (event‑driven) to balance performance and battery life on modern smartphones.
This article explains the fundamentals of Linux epoll as a high‑performance IO multiplexing tool, compares it with select and poll, shows why non‑blocking file descriptors are required, and details the kernel‑level data structures and callbacks that make epoll efficient for backend services.
This article explains why reading Linux kernel source matters, advocates starting from real‑world problems, contrasts a "carpet‑bombing" approach with a precision‑guided method, and shares concrete tools, resources, and step‑by‑step tips for efficiently exploring kernel code.
This article explains how computer buses work, the different types of buses, the role of I/O device interfaces, device controllers, DMA and interrupt controllers, and how Linux implements device drivers to provide a unified I/O subsystem.
This article provides a comprehensive analysis of the Linux kernel's handling of localhost network I/O, detailing how packets destined for 127.0.0.1 bypass physical network interfaces, traverse the routing table, and utilize the loopback virtual device and soft interrupts for efficient intra-machine communication.
This article explains the true nature of a file descriptor (fd) in Linux, tracing how the kernel represents open files through task_struct, files_struct, fdtable, and inode structures, and shows how these layers interact with system calls like open, read, write, dup, and fork.
This article explains the Linux kernel's heap memory allocation process, covering the vm_area_struct and mm_struct data structures, the brk system call implementation, and the page‑fault handling that maps virtual addresses to physical memory, while also mentioning other allocation mechanisms such as mmap and HugePages.
AWS introduces a new EMR Studio IDE to accelerate data science workflows, while the Linux community bans University of Minnesota contributions over malicious patches and Google Chrome adopts Intel‑Microsoft hardware‑enforced stack protection to harden browser security.
Linus Torvalds, the creator of Linux, publicly denounced C++ as a terrible language while supporting the inclusion of Rust in the kernel, sparking heated debate among developers about language choice, safety, and the future of low‑level system programming.
This article introduces the Linux kernel, explains its purpose and different architectures—including microkernel, monolithic, and hybrid designs—covers where kernel files reside, describes kernel modules and their management, and shares practical learning strategies and resources for newcomers.
This article explains the origins and evolution of BPF into eBPF, compares it with classic kernel modules, describes eBPF tracing mechanisms, and shows how eBPF can be leveraged to secure container runtimes against escape and other cloud‑native threats.
The article examines how Rust is entering the Linux ecosystem, detailing discussions between Linus Torvalds and Greg Kroah‑Hartman, the motivations for using Rust in kernel development, and the potential impact on safety and driver programming.
This article provides an in‑depth exploration of Linux’s epoll mechanism, covering its blocking behavior, kernel‑level processing, NAPI optimization, comparisons with select/poll, and practical insights into I/O multiplexing, helping backend engineers understand performance characteristics and design efficient network services.
Learn how to compile the Linux 4.19.172 kernel on CentOS, create a rootfs with BusyBox, and set up QEMU‑based debugging using GDB, including required kernel boot parameters, troubleshooting static linking errors, and optional Eclipse visual debugging.
Understanding CPU power management involves static and dynamic power, the cpufreq framework’s core, governor, driver, and stats components, and common governors, while the schedutil governor—introduced in Linux 4.7—leverages scheduler utilization data, fast‑switching, and tunable parameters to compute and apply per‑cluster frequencies instantly for low‑latency, fine‑grained scaling.
This article introduces the Linux kernel, explains its role as the core of the operating system, details version‑naming conventions and how to interpret kernel version strings, and outlines its main functions such as process, memory, file, device, and network management.
This article explains how Linux manages TCP sockets at the kernel level, demonstrates how to adjust port ranges and file‑descriptor limits, and shows the key data structures and lookup functions that enable high‑concurrency TCP connections, providing practical guidance for scaling client connections.
This article explains the differences and interactions between the SO_REUSEADDR and SO_REUSEPORT socket options, shows how they behave on BSD and Linux kernels across versions, and provides code examples and tables to illustrate binding rules, TIME_WAIT handling, and the evolution of reuse‑port support.
The article explains eBPF’s evolution from packet filtering to a C‑compiled, sandboxed kernel framework, describes its core concepts of bytecode, JIT, and maps, and walks through building, loading, and using an Android eBPF program that counts system calls per PID via tracepoint hooks.
This article explains the principles, applications, and Linux kernel implementation of connection tracking (conntrack), covering its role in NAT, L4 load balancing, key data structures, hook mechanisms, and performance considerations with detailed code examples.
This article explains how to adjust Linux kernel port ranges and file descriptor limits, explores the internal structures of TCP sockets, and walks through key kernel functions such as tcp_v4_rcv and __inet_lookup that locate sockets based on IP and port tuples, providing practical guidance for increasing TCP concurrency.
This article chronicles Linus Torvalds' journey from a graduate student tinkering with a 386 PC and Minix to creating the Linux kernel, highlighting the technical, historical, and community factors that propelled Linux to become the leading open‑source operating system.
Linus Torvalds explains that developers often overestimate delegation and code importance, emphasizing that user needs trump code quality, that appropriate workflows matter more than tools, and that trust, proper use of SCM, and open communication via mailing lists are key to successful large‑scale projects.
KASAN, the Kernel Address Sanitizer, is a built‑in Linux kernel tool that uses shadow memory to mark each 8‑byte block’s accessibility, enabling detection of out‑of‑bounds and use‑after‑free errors while consuming about one‑eighth of RAM and requiring kernel configuration changes to activate.
This article provides a detailed quantitative analysis of TCP connection establishment latency, examining normal handshake processes, abnormal scenarios like queue overflows and TIME_WAIT exhaustion, and offering practical optimization strategies for backend systems.
FUSE implements a user‑space file‑system framework where a kernel module creates the /dev/fuse device and forwards VFS requests into kernel queues, while a multi‑threaded daemon reads these requests, optionally uses splice for zero‑copy, processes them, and writes replies back, enabling simple file‑system development without kernel recompilation.
This article explains the architecture, core components, and operation flow of the Linux FUSE (Filesystem in Userspace) framework, details kernel module loading, mount parameters, request handling, and provides practical optimization tips for building efficient user‑space file systems.
A high‑traffic Java service using MongoDB experienced intermittent latency spikes and a full‑scale outage caused by excessive connection churn, kernel‑level random‑number generation bottlenecks, and mis‑configured client timeouts, which were diagnosed through log analysis, packet captures, and performance testing, leading to concrete mitigation steps.
The article thoroughly examines the Linux SCSI subsystem architecture, illustrating how abstract hardware topology—hosts, channels, IDs, and LUNs—is modeled in software through structs such as scsi_host and scsi_device, and detailing initialization, scanning, path establishment, power management, and block‑layer integration to guide kernel storage driver design.
Linux Kernel 5.9-rc3 has been released, featuring a massive introduction of over two thousand fallthrough macro instances, numerous driver and architecture updates—including AMD Sienna Cichlid and Navy Flounder GPU support, Intel Rocket Lake and SERIALIZE instructions, RISC‑V enhancements, NVMe ZNS, and other improvements—while the stable 5.9 version is expected in early to mid‑October.
DiDi Cloud reduced GPU VM provisioning latency by over 90% through kernel‑level pre‑zeroing of idle pages, transparent huge pages, optimized VFIO DMA mapping, and boot‑sequence streamlining, turning GPU instance creation faster than CPU‑only VMs and meeting strict latency demands.
This article walks through the path from a Java program to the Linux kernel, detailing how the JVM is launched, how libjvm.so is loaded, how pthread_create maps to the clone system call, and what kernel resources are shared by Java threads.
This article explains the core synchronization mechanisms used in modern Linux kernels—including atomic operations, spinlocks, semaphores, and mutexes—detailing their definitions, underlying implementations, API usage, performance characteristics, and appropriate usage scenarios across different execution contexts such as process, interrupt, and soft‑interrupt contexts.
Linus Torvalds publicly denounced Intel’s AVX‑512 instruction set, calling it a ‘power‑virus’ that bloats CPUs for niche benchmark gains, urging Intel to abandon it in favor of simpler, more efficient code that benefits everyday users rather than specialized high‑performance scenarios.
The article reviews USB 3.0’s higher 5 Gbps (10 Gbps Gen 2) bandwidth, asynchronous transfers, burst and stream capabilities, explains the reversible Type‑C connector’s power‑delivery, dual‑lane data and DisplayPort alternate mode, and details USB 3.0 OTG role negotiation via CC pins together with Linux kernel and ConfigFS support.
The Linux kernel’s generic crypto framework, introduced in version 2.5.45, defines core structures such as crypto_template, crypto_alg, crypto_instance and crypto_tfm to dynamically register and combine algorithms (e.g., ecb(aes)), providing a uniform API for symmetric, asymmetric, hash and other primitives, supporting user‑space access via AF_ALG and practical use cases like Android file‑based encryption with built‑in self‑tests for correctness.
Linux Kernel 5.8 RC1 has been released, featuring extensive code changes—including updates to AMD Radeon drivers, SELinux optimizations, power management, new hardware support like Intel Tiger Lake Thunderbolt and Habana Labs Gaudi accelerators, as well as numerous filesystem improvements and documentation clean‑ups, with the stable release slated for mid‑August.
The article explains how the Linux CFS scheduler places newly created or awakened tasks—during fork, exec, or wake‑up—by using sched domains and flags to invoke select_task_rq_fair, which then chooses among energy‑aware, least‑loaded, or idle‑sibling CPUs based on capacity, energy impact, and affinity.
The Linux kernel’s page‑cache indexing migrated from the classic radix‑tree structure—using shift‑based multi‑way nodes, RCU‑protected insert, lookup, and delete operations—to the newer XArray API introduced in 4.20, which retains the radix layout while offering automatic resizing, built‑in locking, richer marking, and a cleaner, safer interface.
Linux’s devfreq framework provides a generic DVFS subsystem for non‑CPU devices, defining standardized kernel‑space structures (devfreq_profile, devfreq_governor, devfreq_device) and sysfs user‑space interfaces, and managing device initialization, frequency scaling via governors, and clean removal, enabling flexible power‑performance optimization across heterogeneous SoC components.
This article details the development, testing, and patch contributions for Netfilter and Mellanox flowtable hardware offload, showing how offloading conntrack and NAT functions dramatically improves bandwidth and packet‑per‑second metrics while exposing remaining challenges such as neighbor handling and port mangling.
This article thoroughly examines Linux's epoll mechanism, detailing its SLAB memory management, middle‑layer design, edge and level triggering, comparison with select/poll, and related advanced polling technologies such as /dev/poll and kqueue, while also discussing C10K/C10M challenges and practical solutions.
This article explains what an IDT is, how it is initialized, the structure of interrupt descriptor entries and gates, the implementation of traditional system calls via int 0x80, and the setup and handling of hardware interrupts in the Linux kernel.
Meituan's security team explains cloud‑native architecture, outlines container‑escape threats from kernel bugs, vulnerable runtimes and misconfigurations, and recommends mitigation through hardened kernels, secure‑container runtimes like gVisor or Kata, rigorous patch management, and collaborative feature development to strengthen runtime protection.
This article explains what CPU interrupts are, distinguishes synchronous and asynchronous types, describes the role of APIC controllers, and details the step‑by‑step initialization of the Interrupt Descriptor Table and related interrupt handling mechanisms in the Linux kernel.
This article chronicles the Linux kernel’s development from its 0.01 inception through version 5.4, highlights key milestones and features, introduces the openEuler distribution and its ARM/Kunpeng support, and outlines a forthcoming series that will dive deeper into kernel internals and system security.
This guide walks you through using an automated script to download dependencies, build QEMU 4.1.1, compile the Linux 4.19.1 kernel and BusyBox for ARM64, and install openEuler 1.0 in a virtual machine, including optional GDB debugging and snapshot tips.
This article explains how Linux kernel abstracts diverse GPIO hardware through a layered software framework, covering hardware variations, pin control, GPIO subsystem design, and practical considerations for embedded engineers handling new boards and drivers.
This article explores the physical structure of RAM, compares random and sequential memory I/O performance, examines real‑world bandwidth versus advertised specs, delves into NUMA latency differences, and shows practical optimization techniques for PHP7 and Redis based on deep hardware and kernel knowledge.
This article explains how embedded Linux on Exynos4 determines which peripheral clocks are enabled or disabled, describes the struct clk representation, shows the registration process in Clock‑exynos4.c, and provides the APIs (clk_get, clk_enable, clk_disable, etc.) for querying and managing module clocks such as the LCD controller.
A user reported extremely slow first SSH login on a UCloud “High‑Kernel Ubuntu 18.04” instance, which was traced to slow entropy‑pool initialization in the Linux kernel, a libssl 1.1.1 bug, and a kernel configuration issue, leading to a fix involving disabling MOTD or enabling CONFIG_RANDOM_TRUST_CPU.
Linux Kernel 5.4, the final major stable release of 2019, introduces a kernel lockdown feature enhancing security, native exFAT filesystem support, and a host of hardware and driver updates including Snapdragon 855, newer AMD/Intel GPUs, Icelake Thunderbolt, VirtIO‑FS, and various filesystem and UAV improvements.
This guide walks you through enabling Docker's experimental mode, installing CRIU, building a simple Node container, creating checkpoints, and restoring containers both on the same host and on a different host, highlighting the prerequisites and limitations of live migration.
UCloud’s external gateway redesign leverages Linux kernel 5.0 features—lightweight tunneling, VRF, and flow offload—to replace OVS/GRE tunnels, addressing IP tunnel complexity, tenant isolation overhead, and netns performance penalties, while contributing patches back to the open‑source community.
