Before revision: These approaches all have severe performance disadvantages for code as frequently run as a packet filter .
After revision: These approaches have, except for the in-kernel compilation approach, which only compiles the code when it is loaded, not every time it is executed performance disadvantages for code as frequently run as a packet filter .