STRUCT BPF_KSOCK(9)

🌸 NAME 🌸

okay so this page is struct bpf_ksock(9) from the Kernel API Manual, and it’s literally a refcounted BPF kernel socket context 💅✨. that’s the whole vibe bestie: a BPF kernel socket context that is refcounted. slay.

🦋 SYNOPSIS 🦋

struct bpf_ksock {
    struct socket *sock;
    refcount_t usage;
    struct rcu_work rwork;
 };

🎀 Members 🎀

• sock — the underlying kernel socket. the main character socket, no cap 🫶
• usage — reference counter. it keeps track of refs, periodt 👑
• rwork — RCU work for deferred cleanup (sock_release may sleep). so yes, cleanup is deferred, and sock_release may sleep 😴

👀 SEE ALSO 👀

• Kernel file ./net/core/bpf_ksock.c
• bpf_ksock_create(9)
• bpf_ksock_connect(9)
• bpf_ksock_acquire(9)
• bpf_ksock_release(9)
• bpf_ksock_send(9)

xoxo from ./net/core — that’s the source/version bestie — dated October 2026 🎀💖. bye bestie, go read those other pages! 🌈