# Beeline: Enforcing application-layer policies in eBPF

DevFeed: [Beeline: Enforcing application-layer policies in eBPF](<https://devfeed.tech/articles/beeline-enforcing-application-layer-policies-in-ebpf-10856.md>)

Original publisher: [Read original article](<https://blog.apnic.net/2026/09/02/beeline-enforcing-application-layer-policies-in-ebpf/>)

Author: Brandner Laurin

Published: 2026-09-01T23:30:00Z

Content type: article

Language: en

Sources: [APNIC Blog](<https://devfeed.tech/sources/apnic-blog.md>)

Topics: [eBPF](<https://devfeed.tech/topics/ebpf.md>), [Cloud Native Ecosystem](<https://devfeed.tech/topics/cloud-native-ecosystem.md>), [Latency](<https://devfeed.tech/topics/latency.md>), [networking](<https://devfeed.tech/topics/networking.md>)

Tags: [applications](<https://devfeed.tech/tags/applications.md>), [cilium](<https://devfeed.tech/tags/cilium.md>), [ebpf](<https://devfeed.tech/tags/ebpf.md>), [guest-post](<https://devfeed.tech/tags/guest-post.md>), [http](<https://devfeed.tech/tags/http.md>), [latency](<https://devfeed.tech/tags/latency.md>), [networking](<https://devfeed.tech/tags/networking.md>), [tech-matters](<https://devfeed.tech/tags/tech-matters.md>)

## AI overview

The article presents Beeline, a system that enforces application-layer (L7) policies directly in the kernel using eBPF. It explains the latency overhead of user-space service proxies and reports that Beeline improves request latency by 46%, while eliminating the service proxy from the critical path for 89% of L7 policies in the wild.

## Source excerpt

Guest Post: While many L7 protocols are complex to parse, the logic needed to enforce L7 policies tends to be simple. For the vast majority (89%) of L7 policies in the wild, Beeline can eliminate the service proxy from the critical path.