Seems we have some language features not fully documented (like bitshift operators in #1322).

Would be good to go through language grammar and make sure everything is in the reference guide.

We use kind for integration tests against a kubernetes cluster. We now have a dirty hack to load the built images into the kind docker daemon since when we started using it kind was at a very early stage and didn't have the load command. Now the load command is available so we can just replace the hack with it!

Docs here
https://kind.sigs.k8s.io/docs/user/quick-start/#loading-an-image-into-y

An example is a socketfilter that uses constants like https://github.com/cloudflare/rakelimit.

program filter_ipv4: map .rodata: can't freeze map: can't freeze map: operation not permitted

• Why doesn't the kernel let us freeze the map?
• Can we ignore EPERM during freezing? After all we already check whether we can freeze in the first place.

https://github.com/aquasecurity/tracee/blob/c22f59cdab9b07cfaf4d33795b79ed09bbada013/Makefile#L98-L102

Should be -C not -c

Since the kernel's libbpf seems to handle .text ELF sections gracefully, we should probably do that too.

Can we get some performance comparison between polycube and using standard linux facilities (NAT, iptables, etc.)?

CPU usage, PPS, latencies, etc.