You should split your controller - it is running in both the control and data planes. Idea is good though, wish you luck.

Thank you! Not really, the controller is not doing dataplane per-say, it only pushes eBPF programs to the kernel for the relevant apps/cgroups so that could be considered control-plane. The full data-plane run in eBPF.

Aiui the controller is only running in the control plane, and the ebpf programs are in the data plane?