How does swarm's ingress network send vxlan packets in namespace through node's interface

General Discussions
1

In the namespace of the ingress, we can see the forwarding entries of the bridge：

[root@VM-16-2-centos ~]# bridge fdb show dev vxlan0
f6:5c:d0:42:6f:71 master br0 permanent
02:42:0a:00:00:02 dst 172.22.16.10 link-netnsid 0 self permanent
02:42:0a:00:00:04 dst 172.22.16.14 link-netnsid 0 self permanent
02:42:0a:00:00:06 dst 172.22.16.9 link-netnsid 0 self permanent
02:42:0a:00:00:0c dst 172.22.16.9 link-netnsid 0 self permanent
02:42:0a:00:00:0d dst 172.22.16.10 link-netnsid 0 self permanent
[root@VM-16-2-centos ~]#

I can’t catch the vlxan package in the namespace, but I can on the node interface, why is that?
What technology is used to achieve? ebpf?

Similarly, after the remote node receives the vxlan package, how to forward it to the ingress namespace