As Cilium is deployed as a DaemonSet, it will write a new CNI configuration 05- cilium.conflist and remove the standard 05-cilium.conf. The new configuration now enables HostPort. Any new pod scheduled 262144 bytes 15:05:24.643427 IP 10.244.1.35.51116 > 10.244.3.78.8080: Flags [S], seq 476474887, win 64860, options [mss 1410,sackOK,TS val 648097391 ecr 0,nop,wscale 7], length 0 15:05:24.644185 IP 10 nop,wscale 7], length 0 15:05:24.644238 IP 10.244.1.35.51116 > 10.244.3.78.8080: Flags [.], ack 1, win 507, options [nop,nop,TS val 648097391 ecr 4004186138], length 0 15:05:24.644277 IP 10.244.1.35.51116

As Cilium is deployed as a DaemonSet, it will write a new CNI configuration 05- cilium.conflist and remove the standard 05-cilium.conf. The new configuration now enables HostPort. Any new pod scheduled 262144 bytes 15:05:24.643427 IP 10.244.1.35.51116 > 10.244.3.78.8080: Flags [S], seq 476474887, win 64860, options [mss 1410,sackOK,TS val 648097391 ecr 0,nop,wscale 7], length 0 15:05:24.644185 IP 10 nop,wscale 7], length 0 15:05:24.644238 IP 10.244.1.35.51116 > 10.244.3.78.8080: Flags [.], ack 1, win 507, options [nop,nop,TS val 648097391 ecr 4004186138], length 0 15:05:24.644277 IP 10.244.1.35.51116

CAPACITY INSTANCE TYPE IMAGE ID test-cluster ng-25560078 2019-07-23T06:05:35Z 0 2 0 m5.large ami- 0923e4b35a30a5f53 eksctl As Cilium is deployed as a DaemonSet, it will write a new CNI configuration 05- cilium.conflist and remove the standard 05-cilium.conf. The new configuration now enables HostPort. Any new pod scheduled CAPACITY INSTANCE TYPE IMAGE ID test-cluster ng-25560078 2019-07-23T06:05:35Z 0 2 0 m5.large ami- 0923e4b35a30a5f53 eksctl

CAPACITY INSTANCE TYPE IMAGE ID test-cluster ng-25560078 2019-07-23T06:05:35Z 0 2 0 m5.large ami- 0923e4b35a30a5f53 eksctl As Cilium is deployed as a DaemonSet, it will write a new CNI configuration 05- cilium.conflist and remove the standard 05-cilium.conf. The new configuration now enables HostPort. Any new pod scheduled CAPACITY INSTANCE TYPE IMAGE ID test-cluster ng-25560078 2019-07-23T06:05:35Z 0 2 0 m5.large ami- 0923e4b35a30a5f53 eksctl

Status: OK, ip 10.15.28.238, port-range 10000-20000 Cluster health: 1/1 reachable (2018-04-05T16:08:22Z) The status indicates that all components are opera�onal with the Kubernetes integra�on are mounted from the host filesystem into the pod where Cilium is running. The file /etc/cni/net.d/05-cilium.conf is wri�en in case it does not exist yet. The binary cilium-cni is installed to /opt/cni/bin variables can be specified in the DaemonSet file like this: env: - name: "CNI_CONF_NAME" value: "05-cilium.conf" The following variables are supported: Op�on Descrip�on Default HOST_PREFIX Path prefix

As Cilium is deployed as a DaemonSet, it will write a new CNI configuration 05- cilium.conflist and remove the standard 05-cilium.conf. The new configuration now enables HostPort. Any new pod scheduled CREATED AT [...] ciliumlocalredirectpolicies.cilium.io 2020-08-24T05:31:47Z Create backend and client pods Deploy a backend pod where traffic needs to be redirected to full protocol decode listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes 05:16:05.229597 In de:e4:e9:94:b5:9f ethertype IPv4 (0x0800), length 76: 192.168.98.118.47934 > 192

As Cilium is deployed as a DaemonSet, it will write a new CNI configuration 05- cilium.conflist and remove the standard 05-cilium.conf. The new configuration now enables HostPort. Any new pod scheduled mounted from the host filesystem into the pod where Cilium is running. 2. The file /etc/cni/net.d/05-cilium.conf is written in case it does not exist yet. 3. The binary cilium-cni is installed to /opt/cni/bin variables can be specified in the DaemonSet file like this: env: - name: "CNI_CONF_NAME" value: "05-cilium.conf" The following variables are supported: Option Description Default HOST_PREFIX Path

not ? ● symbols -> symbol address ○ manual right now ○ Can it be made as part of implementation? 05 To-do list Any Questions ???

0x8(%rsp),%rax 6609a5: b9 02 00 00 00 mov $0x2,%ecx 6609aa: f2 0f 10 05 16 a6 0f movsd 0xfa616(%rip),%xmm0 6609b1: 00 6609b2: f2 0f 10 0d 36 a6 0f

阿里云 应用可观测技术专家 目 录 eBPF简介 01 eBPF在云原生场景下的应用 02 微服务可观测的挑战 03 Golang + eBPF实现数据采集 04 构建完整的应用可观测系统 05 eBPF简介 第一部分 eBPF简介 01. eBPF简介 eBPF = extended Berkeley Packet Filter Dynamically program the