It would be interesting to see this done using Linux XDP/eBPF routines.