eBPF Summit October 28, 2020 Debugging Go in production using eBPF ABOUT ME ? i’m Zain @zainasgar Co-Founder/CEO Pixie (@pixie_run) & Adjunct Professor of CS @ Stanford DEVELOPER PROBLEM You’re ing/trace_example DEMO: Go Argument Tracer ● Utilizing tracepoints for dynamic logging allows for easy instrumentation of production binaries ● The complexities of the Go ABI make it difficult to do

How to ship BPF with your Go project Lorenz Bauer October 28, 2020 Goal ● Count the number of packets on lo ● Print the count to the console ● From a single Go binary Use the source, Luke github github.com/lmb/ship-bpf-with-go github.com/cilium/ebpf

approaches such as HTB (Hierarchy Token Bucket) or TBF (Token Bucket Filter) as used in the bandwidth CNI plugin, for example. Monitoring and Troubleshooting The ability to gain visibility and to troubleshoot cluster using Azure Kubernetes Service [https://docs.microsoft.com/en-us/azure/aks/] with no CNI plugin pre-installed (BYOCNI). See Azure Cloud CLI [https://docs.microsoft.com/en-us/cli/azure/install-azure-cli cluster az aks create \ --resource-group "${AZURE_RESOURCE_GROUP}" \ --name "${NAME}" \ --network-plugin none # Get the credentials to access the cluster with kubectl az aks get-credentials --resource-group

Using Istio Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux are exported via Prometheus for integration with your existing dashboards. Integrations Network plugin integrations: CNI [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] ca60a424ce69a4d79f502650199ca2b52f29e631 3. Create a minikube cluster: minikube start --network-plugin=cni --memory=4096 4. Mount the BPF filesystem minikube ssh -- sudo mount bpffs -t bpf /sys/fs/bpf

approaches such as HTB (Hierarchy Token Bucket) or TBF (Token Bucket Filter) as used in the bandwidth CNI plugin, for example. Monitoring and Troubleshooting The ability to gain visibility and to troubleshoot cluster using Azure Kubernetes Service [https://docs.microsoft.com/en-us/azure/aks/] with no CNI plugin pre-installed (BYOCNI). See Azure Cloud CLI [https://docs.microsoft.com/en-us/cli/azure/install-azure-cli cluster az aks create \ --resource-group "${AZURE_RESOURCE_GROUP}" \ --name "${NAME}" \ --network-plugin none # Get the credentials to access the cluster with kubectl az aks get-credentials --resource-group

and alerting, and application and security visibility based on flow logs. Integrations Network plugin integrations: CNI [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] minikube start --network-plugin=cni --memory=4096 # Only available for minikube >= v1.12.1 minikube start --cni=cilium --memory=4096 Note From minikube v1.12.1+, cilium networking plugin can be enabled directly directly with -- network-plugin=cilium parameter in minikube start command. With this flag enabled, minikube will not only mount eBPF file system but also deploy quick- install.yaml automatically. 4. Mount

Using Istio Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux and alerting, and application and security visibility based on flow logs. Integrations Network plugin integrations: CNI [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] ca60a424ce69a4d79f502650199ca2b52f29e631 3. Create a minikube cluster: minikube start --network-plugin=cni --memory=4096 4. Mount the BPF filesystem minikube ssh -- sudo mount bpffs -t bpf /sys/fs/bpf

approaches such as HTB (Hierarchy Token Bucket) or TBF (Token Bucket Filter) as used in the bandwidth CNI plugin, for example. Monitoring and Troubleshooting The ability to gain visibility and to troubleshoot and alerting, and application and security visibility based on flow logs. Integrations Network plugin integrations: CNI [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] ca60a424ce69a4d79f502650199ca2b52f29e631 3. Create a minikube cluster: minikube start --network-plugin=cni --memory=4096 Note If minikube is deployed as a container (that is if docker is the configured

Started Using Is�o Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administra�on System Requirements Summary Linux Distribu�on Compa�bility Matrix Linux Kernel metrics are exported via Prometheus for integra�on with your exis�ng dashboards. Integrations Network plugin integra�ons: CNI [h�ps://github.com/containernetworking/cni], libnetwork [h�ps://github.com/docker/libnetwork] minikube version minikube version: v0.33.1 Create a minikube cluster: minikube start --network-plugin=cni --memory=4096 Note that in case of installing Cilium for a specific Kubernetes version, the

the classroom set-up guide, test each lab exercise and troubleshoot problems encountered, if any. • Go through the Instructor Guide and the presentation slides in detail before getting into the classroom enable 3D Desktop effects This section serves as a quick tour of the Ubuntu desktop. The course will go into more detail in later lessons, but this will give you a taste of what's ahead. 22 Chapter 2. Exploring trying to remember the URL, create a bookmark. The next time you are online, simply click the link to go to that Web page. You can view Web feeds such as news and blog headlines in the bookmarks toolbar or