---
title: "Discussion on \"Not root: proving an XDP agent needs exactly three capabilities\" | Hashnode"
description: "Discussion on \"Not root: proving an XDP agent needs exactly three capabilities\". Building AgentXDP, part 3. Part 2 parsed RoCE v2 inside an XDP program. This part is about the permission to load it: how much power the agent really needs, and how the tests prove it, on my VM and in"
url: "https://hashnode.com/posts/not-root-proving-an-xdp-agent-needs-exactly-three-capabilities/6ad1818ceec3044d0b2772ef"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Not root: proving an XDP agent needs exactly three capabilities](https://pegasus-nathanael-tech.hashnode.dev/not-root-proving-an-xdp-agent-needs-exactly-three-capabilities?utm_source=hashnode&utm_medium=feed)

Building AgentXDP, part 3. Part 2 parsed RoCE v2 inside an XDP program. This part is about the permission to load it: how much power the agent really needs, and how the tests prove it, on my VM and in

Oct 16 · 5 min read · pegasus-nathanael-tech.hashnode.dev  
Updated Nov 1  
Read the article

-   [#ebpf](https://hashnode.com/tag/ebpf)
-   [#learning-in-public](https://hashnode.com/tag/learning-in-public)
-   [#learning-journey](https://hashnode.com/tag/learning-journey)
-   [#efficiency](https://hashnode.com/tag/efficiency)
-   [#gpu](https://hashnode.com/tag/gpu)

## Written by

[Nathanael FETUE](https://hashnode.com/@nathanael-fetue)

@nathanael-fetue · Toulouse

  
[View profile](https://hashnode.com/@nathanael-fetue)

From Cameroon to Cloud Engineering at ISAE-SUPAERO/ENSEEIHT |DeepTech & Distributed Systems

Hi, I'm Nathanael. MSc graduate from Toulouse INP - ENSEEIHT (N7), France. I work on hardware/software co-design and low-level performance. I just completed a six-month research internship at INRIA Rennes, where I designed a hardware isolation mechanism for processing-in-memory processors (UPMEM), measured in a cycle-accurate simulator at 5.54% overhead at most, against 26 to 120% for a software scheme, and validated on FPGA. I write about computer architecture, operating systems, networking (RDMA/InfiniBand) and the move from research to industry. I am looking for my first role in systems and performance engineering, AI infrastructure or low-level software. Stack: C/C++, Go, Python, Verilog, Linux, RDMA, Terraform, Ansible. Contact: nathanaelfetuefoko@gmail.com | linkedin.com/in/nathanael-fetue-foko | github.com/NathanaelFetue

## Responses 1

Markdown supported · ⌘↵ to post

[Nathanael FETUE](https://hashnode.com/@nathanael-fetue)

[Oct 16](https://hashnode.com/posts/not-root-proving-an-xdp-agent-needs-exactly-three-capabilities/6ad1818ceec3044d0b2772ef/comment/6ad18684d6d79b83412c2bf2)

Great work !