BPF / cBPF / eBPF / XDP 관련

마구잡이식 기록. 정리는 한참 나중에 하기로....

 

 

Brendan Gregg's Blog

http://www.brendangregg.com/

http://www.brendangregg.com/blog/index.html

Linux 4.x Tracing: Performance Analysis with bcc/BPF

https://www.socallinuxexpo.org/sites/default/files/presentations/SCALE2017_perf_analysis_BPF_16_9.pdf

BPF Compiler Collectino (BCC)

https://github.com/iovisor/bcc

bpfrace

https://github.com/iovisor/bpftrace

 

 

 

 

 

2018/12/07 [논문] 가상 네트워크 트래픽 모니터링을 위한 eBPF기반 Virtual TAP 설계 및 구현

http://www.knom.or.kr/knom-review/v21n2/4.pdf

 

2018/07/06 초당 천만개의 패킷을 버리는 방법

https://blog.cloudflare.com/ko/how-to-drop-10-million-packets-ko/

https://github.com/cloudflare/cloudflare-blog/blob/master/2018-07-dropping-packets/README.md

 

2018/08/17 BPF / XDP 8월 세미나 KossLab

https://www.slideshare.net/TaeungSong/bpf-xdp-8-kosslab

 

 

2019/03/03 Performance analysis in Linux storage stack with BPF

https://www.slideshare.net/TaeungSong/usenix-vault19-performance-analysis-in-linux-storage-stack-with-bpf

 

 

2017/04/25 Cilium - Network and Application Security with BPF and XDP Thomas Graf, Covalent IO

https://www.slideshare.net/Docker/cilium-network-and-application-security-with-bpf-and-xdp-thomas-graf-covalent-io

 

2016/05/26 Meet cute-between-ebpf-and-tracing

https://www.slideshare.net/vh21/meet-cutebetweenebpfandtracing

 

 

2019/01/07 Introduction to eBPF in Red Hat Enterprise Linux 7

https://www.redhat.com/en/blog/introduction-ebpf-red-hat-enterprise-linux-7

 

 

2018/04/16 BPF, eBPF, XDP and Bpfilter… What are These Things and What do They Mean for the Enterprise?

https://www.netronome.com/blog/bpf-ebpf-xdp-and-bpfilter-what-are-these-things-and-what-do-they-mean-enterprise/

 

 

 

 

2018/12/30 Linux BPF (Berkeley Packet Filter)

https://ssup2.github.io/theory_analysis/Linux_BPF/

 

 

 

---

BPF (Berkeley Packet Filter) : https://en.wikipedia.org/wiki/Berkeley_Packet_Filter

eBPF (enhanced BPF)

cBPF (classic BPF)

XDP (eXpress Data Path)

 

 

(출처 : https://www.blackhat.com/docs/eu-16/materials/eu-16-Reshetova-Randomization-Can't-Stop-BPF-JIT-Spray-wp.pdf)

 

Borkmann, D.: On getting tc classifier fully programmable with cls_bpf (2016).

https://netdevconf.info/1.1/proceedings/papers/On-getting-tc-classifier-fully-programmable-with-cls-bpf.pdf

 

SECure COMPuting with filters (2016).

https://www.kernel.org/doc/Documentation/prctl/seccomp_filter.txt

 

LSF (Linux Socket Filtering)Schulist, J., et al.: Linux Socket Filtering aka Berkeley Packet Filter (BPF) (2016).

https://www.kernel.org/doc/Documentation/networking/filter.txt

 

Starovoitov, A.: Tracing: attach eBPF programs to kprobes (2015).

https://lwn.net/Articles/636976/

 

A JIT for packet filters

https://lwn.net/Articles/437981/

 

 

 

 

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/networking/filter.txt

 

BSD Packet Filter (1992/12/19)

http://www.tcpdump.org/papers/bpf-usenix93.pdf

 

 

 

 

JIT (Just-In-Time) 컴파일

LLVM + clang