[hacknat]

IPVS cannot be dynamic like XDP can, which can be powered by a reactive bpf program. XDP bypasses every kernel function and basically takes over packet processing at the driver level, so the performance tends to be pretty good. Julia Evans wrote a blog post and has some performance numbers at the bottom of her post: https://jvns.ca/blog/2017/04/07/xdp-bpf-tutorial/