This talk demonstrates that programmability and performance does not requireuser space networking, it can be achieved in the kernel by generating BPFprograms and leveraging the existing kernel subsystems. We will demo an earlyprototype which provides fast IPv6 & IPv4 connectivity to containers,container labels based security policy with avg cost O(1), and debugging andmonitoring based on the per-cpu perf ring buffer.