How and When You Should Measure CPU Overhead of eBPF Programs Bryce Kahle, Datadog October 28, 2020 Why should I profile eBPF programs? CI variance tracking Tools kernel.bpf_stats_enabled kernel cases: – Benchmarking + CI/CD – Sampling profiler in production How does it work? – Adds ~20ns of overhead per run Two ways to enable kernel eBPF stats sysctl procfs Three ways to access kernel eBPF stats

and reliability secCrypto secPaver secGear Simplified O&M and development A-Ops SysCare CPDS CPU GPU Optimal performance for a single scenario Multi-scenario capability collaboration and sharing automatically generates module files. • HPCRunner implements one-click compilation and operation, CPU/GPU performance profiling, and benchmarking based on HPC configurations. • All configurations are for optimization based on specific service characteristics and requirements. For example, specific CPU or device binding policies can be implemented. To meet the requirements of these applications, hwloc

enhances server and cloud computing features, and incorporates key technologies including cloud-native CPU scheduling algorithms for hybrid service deployments and KubeOS for containers. As an OS platform suits hybrid deployments of online and offline cloud services. Its innovative CPU scheduling algorithm ensures real-time CPU preemption and jitter suppression for online services. Additionally, its innovative Docker+QEMU solution, the iSulad+shimv2+StratoVirt secure container solution reduces the memory overhead and boot time by 40%. • Dual-plane deployment tool eggo: OSs can be installed with one click for

- Flexibility Why BPF? - Flexibility - Low overhead Why BPF? - Flexibility - Low overhead - Continuous profiling Why BPF? - Flexibility - Low overhead - Continuous profiling - No modifications of - Trace complex Ruby programs execution rbperf – on-CPU profiling - $ rbperf record --pid=124 cpu - $ rbperf report [...] rbperf – Rails on-CPU profile rbperf – tracing write(2) calls - $ rbperf driver program - Make the OSS version awesome - Better documentation (including how to measure overhead) - Add more output formats - Open source GDB / drgn helper - Other tools? - Containers support

relying on eBPF, all visibility is programmable and allows for a dynamic approach that minimizes overhead while providing deep and detailed visibility as required by users. Hubble has been created and specifically in the Linux kernel’s socket layer (e.g. at TCP connect time) such that per-packet NAT operations overhead can be avoided in lower layers. Bandwidth Management Cilium implements bandwidth management through If you are running in an environment with more than 250 nodes, 5k pods, or if you observe a high overhead in state propagation caused by Kubernetes events. If you do not want Cilium to store state in Kubernetes

relying on eBPF, all visibility is programmable and allows for a dynamic approach that minimizes overhead while providing deep and detailed visibility as required by users. Hubble has been created and specifically in the Linux kernel’s socket layer (e.g. at TCP connect time) such that per-packet NAT operations overhead can be avoided in lower layers. Bandwidth Management Cilium implements bandwidth management through of reasons when to use a kvstore: If you are running in an environment where you observe a high overhead in state propagation caused by Kubernetes events. If you do not want Cilium to store state in Kubernetes

relying on eBPF, all visibility is programmable and allows for a dynamic approach that minimizes overhead while providing deep and detailed visibility as required by users. Hubble has been created and specifically in the Linux kernel’s socket layer (e.g. at TCP connect time) such that per-packet NAT operations overhead can be avoided in lower layers. Bandwidth Management Cilium implements bandwidth management through If you are running in an environment with more than 250 nodes, 5k pods, or if you observe a high overhead in state propagation caused by Kubernetes events. If you do not want Cilium to store state in Kubernetes

relying on BPF, all visibility is programmable and allows for a dynamic approach that minimizes overhead while providing deep and detailed visibility as required by users. Hubble has been created and specifically If you are running in an environment with more than 250 nodes, 5k pods, or if you observe a high overhead in state propagation caused by Kubernetes events. If you do not want Cilium to store state in Kubernetes number of open connections. Thus, clients are encouraged to cache their connections rather than the overhead of reopening TCP connections every time they need to store or retrieve data. Multiple clients can

treated as a name-based virtual host. mod_deflate will now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. Multi-language error documents from the origin matches the content in the cache, this can be determined easily and without the overhead of transferring the entire resource. Secondly, a well designed origin server will be designed in disadvantages: The server is approximately 20% slower at startup time because of the symbol resolving overhead the Unix loader now has to do. The server is approximately 5% slower at execution time under some

treated as a name-based virtual host. mod_deflate will now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. Multi-language error documents from the origin matches the content in the cache, this can be determined easily and without the overhead of transferring the entire resource. Secondly, a well designed origin server will be designed in disadvantages: The server is approximately 20% slower at startup time because of the symbol resolving overhead the Unix loader now has to do. The server is approximately 5% slower at execution time under some