Cilium

iptables vs eBPF: why Cilium changes the networking model at scale

One traverses a growing rule chain. One doesn't.