[tptacek]

eBPF at Fly.io:

* routes all our UDP traffic; from edge box to worker box, UDP packets don't touch userland until they hit a customer VM;

* allows our Anycast proxy to listen on every TCP port, instead of a set of well-known ports; and

* implements our private networking, allowing VMs from the same customer organizations to talk to each other.