Apple has kicked errbody out of kernel space over security concerns, so even companies with 25 years of experience writing network virtualization kernel extensions must now instead use Apple's vastly inferior macOS facility that can reduce performance by as much as 80%.
..never mind if it cost the equivalent of several m2ultras discovering what I wrote, -1 doh.
OTOH, I don’t believe much of what I read on here because of such direct negative experiences like this (being downvoted on stuff I have first hand knowledge of) —and that truly is priceless.