We have covered Facebook's BPF-based load balancer with DDoS protection in a previous blog post: Why is the kernel community replacin...