Proceedings of the 1st Workshop on eBPF and Kernel Extensions最新文献_第2页

Enabling BPF Runtime policies for better BPF management 启用BPF运行时策略以更好地管理BPF

Proceedings of the 1st Workshop on eBPF and Kernel Extensions Pub Date : 2023-09-10 DOI: 10.1145/3609021.3609297

R. Sahu, Dan Williams

{"title":"Enabling BPF Runtime policies for better BPF management","authors":"R. Sahu, Dan Williams","doi":"10.1145/3609021.3609297","DOIUrl":"https://doi.org/10.1145/3609021.3609297","url":null,"abstract":"As eBPF increasingly and rapidly gains popularity for observability, performance, troubleshooting, and security in production environments, a problem is emerging around how to manage the multitude of BPF programs installed into the kernel. Operators of distributed systems are already beginning to use BPF-orchestration frameworks with which they can set load and access policies for who can load BPF programs and access their resultant data. However, other than a guarantee of eventual termination, operators currently have little to no visibility into the runtime characteristics of BPF programs and thus cannot set policies that ensure their systems still meet crucial performance targets when instrumented with BPF programs. In this paper, we propose that having a runtime estimate will enable better policies that will govern the allowed latency in critical paths. Our key insight is to leverage the existing architecture within the verifier to statically track the runtime cost of all possible branches. Along with dynamically determined runtime estimates for helper functions and knowledge of loop-based helpers' effects on control flow, we generate an accurate---although broad---range estimate for making runtime policy decisions. We further discuss some of the limitations of this approach, particularly in the case of broad estimate ranges as well as complementary tools for BPF runtime management.","PeriodicalId":206230,"journal":{"name":"Proceedings of the 1st Workshop on eBPF and Kernel Extensions","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-09-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129829780","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Practical and Flexible Kernel CFI Enforcement using eBPF 使用eBPF实现实用灵活的内核CFI

Proceedings of the 1st Workshop on eBPF and Kernel Extensions Pub Date : 2023-09-10 DOI: 10.1145/3609021.3609293

Jinghao Jia, Michael V. Le, Salman Ahmed, Dan Williams, H. Jamjoom

引用次数: 0

HEELS: A Host-Enabled eBPF-Based Load Balancing Scheme 一个基于主机的ebp负载均衡方案

Proceedings of the 1st Workshop on eBPF and Kernel Extensions Pub Date : 2023-09-10 DOI: 10.1145/3609021.3609307

Rui Yang, Marios Kogias

引用次数: 0

Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing 利用动态沙箱释放普通eBPF的潜力

Proceedings of the 1st Workshop on eBPF and Kernel Extensions Pub Date : 2023-08-03 DOI: 10.1145/3609021.3609301

S. Lim, Xueyuan Han, Thomas Pasquier

引用次数: 1

Proceedings of the 1st Workshop on eBPF and Kernel Extensions 第一届eBPF与内核扩展研讨会论文集

Proceedings of the 1st Workshop on eBPF and Kernel Extensions Pub Date : 1900-01-01 DOI: 10.1145/3609021

引用次数: 0