bpfbox: Simple Precise
Process Confinement
with eBPF and KRSIaccess) ▶ net(socket, access) ▶ signal(prog, sig) ▶ etc. Directives augment blocks of rules: ▶ #[directive] syntax ▶ Specify actions to be taken on a block of rules ▶ Add additional context to a block of0 码力 | 8 页 | 528.12 KB | 1 年前3
Cilium v1.11 Documentationhtml#substitution-references] (for example: |SCM_WEB|). In that case, always use the .. parsed-literal directive, otherwise the token will not be substituted. Prefer: .. parsed-literal:: $ kubectl create block. If the text contained code or structured output, use the .. code-block directive. Do not use the .. code directive, which is slightly less flexible. Prefer: .. code-block:: shell-session $ $ cd cilium/ .. code-block:: shell-session ls cilium cd cilium/ The .. code-block directive should always take a language name as argument, for example: .. code-block:: yaml or .. code-block::0 码力 | 1373 页 | 19.37 MB | 1 年前3
Cilium v1.6 Documentationvery limited form of looping is available for constant upper loop bounds by using #pragma unroll directive. Example code that is compiled to BPF: #pragma unroll for (i = 0; i < IPV6_MAX_HEADERS; i++) remove the padding from the struct is necessary. Removing the padding by using #pragma pack(n) directive: #pragma pack(4) struct called_info { u64 start; // 8-byte u64 end; // 8-byte u320 码力 | 734 页 | 11.45 MB | 1 年前3
Cilium v1.9 Documentationit in the next step. After updating the client-go fork, update the commit SHA in the replace directive of the go.mod file for the client-go library in the Cilium repository. At the same time, update very limited form of looping is available for constant upper loop bounds by using #pragma unroll directive. Example code that is compiled to BPF: #pragma unroll for (i = 0; i < IPV6_MAX_HEADERS; i++) remove the padding from the struct is necessary. Removing the padding by using #pragma pack(n) directive: #pragma pack(4) struct called_info { u64 start; // 8-byte u64 end; // 8-byte u320 码力 | 1263 页 | 18.62 MB | 1 年前3
Cilium v1.7 Documentationvery limited form of looping is available for constant upper loop bounds by using #pragma unroll directive. Example code that is compiled to BPF: #pragma unroll for (i = 0; i < IPV6_MAX_HEADERS; i++) remove the padding from the struct is necessary. Removing the padding by using #pragma pack(n) directive: #pragma pack(4) struct called_info { u64 start; // 8-byte u64 end; // 8-byte u320 码力 | 885 页 | 12.41 MB | 1 年前3
Cilium v1.8 Documentationvery limited form of looping is available for constant upper loop bounds by using #pragma unroll directive. Example code that is compiled to BPF: #pragma unroll for (i = 0; i < IPV6_MAX_HEADERS; i++) remove the padding from the struct is necessary. Removing the padding by using #pragma pack(n) directive: #pragma pack(4) struct called_info { u64 start; // 8-byte u64 end; // 8-byte u320 码力 | 1124 页 | 21.33 MB | 1 年前3
Cilium v1.10 Documentationvery limited form of looping is available for constant upper loop bounds by using #pragma unroll directive. Example code that is compiled to BPF: #pragma unroll for (i = 0; i < IPV6_MAX_HEADERS; i++) remove the padding from the struct is necessary. Removing the padding by using #pragma pack(n) directive: #pragma pack(4) struct called_info { u64 start; // 8-byte u64 end; // 8-byte u320 码力 | 1307 页 | 19.26 MB | 1 年前3
共 7 条
- 1













