? ? In This Talk… • Different “types” of BPF programs • Write BPF programs in Rust • Add new feature in RedBPF • Use BPF maps to make stateful decisions • Load the program and protect the Rabbit(MQ) Rabbit(MQ)! About Me • Software Engineer @ CCP Games • @aquarhead on GitHub, Twitter… • Rust (and Elixir) • Disclaimer: new to BPF & kernel networking, pardon my mistake and welcome corrections • RedBPF uses Rust for both in-kernel and user- space programs - benefits from LLVM integration • Rust: expressive type system, modern toolchain - but most importantly, I love Rust! • For networking

eBPF programs to be loaded in the form of bytecode. Typically, eBPF developers write programs in C, Rust, or other languages, which are then compiled into eBPF bytecode. eBPF programs can be loaded into under the hood, making them go full steam. eBPF now has a variety of libraries written in Golang, Rust, C++, and others that help loading, compiling, and debugging eBPF programs across both user and kernel 4.0 International (CC-BY-4.0). See https://phippy.io The crab is based on Ferris, the unofficial Rust mascot, designed by Karen Rustad Tölva. It is licensed under Creative Commons Zero (CC0-1.0, Public

log to your program, re-compile and re-deploy. ○ This can be simple log statements, or ○ More comprehensive like Open tracing. Option 2: Debugger ○ GDB ○ Delve Option 3: Linux tracing utility ○ strace/ftrace

documentation [https://pkg.go.dev/k8s.io/kops/pkg/apis/kops? tab=doc#CiliumNetworkingSpec] for a comprehensive list of all the options Appendix: Details of kops flags used in cluster creation The following configuration. See https://docs.cilium. io/en/stable/config uration/metrics/#hu bble-metrics for more comprehensive documentation about Hubble metrics. object {"enabled":null, "port":9091,"ser viceMonitor": {"annotations": configuration. See https://docs.cilium.io/en/stable/configuration/metrics/#hubble-metrics for more comprehensive documentation about Hubble metrics. objec hubble.metrics.enabled Configures the list of metrics

documentation [https://pkg.go.dev/k8s.io/kops/pkg/apis/kops? tab=doc#CiliumNetworkingSpec] for a comprehensive list of all the options Appendix: Details of kops flags used in cluster creation The following configuration. See https://docs.cilium. io/en/stable/config uration/metrics/#hu bble-metrics for more comprehensive documentation object {"enabled":null, "port":9091,"ser viceMonitor": {"enabled":false }} Key configuration. See https://docs.cilium.io/en/stable/configuration/metrics/#hubble-metrics for more comprehensive documentation about Hubble metrics. objec hubble.metrics.enabled Configures the list of metrics

documentation [https://pkg.go.dev/k8s.io/kops/pkg/apis/kops? tab=doc#CiliumNetworkingSpec] for a comprehensive list of all the options Appendix: Details of kops flags used in cluster creation The following "port":9091,"ser viceAnnotations" : {},"serviceMonit Key Description Type Default e-metrics for more comprehensive documentation about Hubble metrics. or": {"annotations": {},"enabled":fal se,"labels":{}}} hubble configuration. See https://docs.cilium.io/en/stable/operations/metrics/#hubble-metrics for more comprehensive documentation about Hubble metrics. ob hubble.metrics.enabled Configures the list of metrics

documentation [https://pkg.go.dev/k8s.io/kops/pkg/apis/kops? tab=doc#CiliumNetworkingSpec] for a comprehensive list of all the options Appendix: Details of kops flags used in cluster creation The following

documentation [https://pkg.go.dev/k8s.io/kops/pkg/apis/kops? tab=doc#CiliumNetworkingSpec] for a comprehensive list of all the options Appendix: Details of kops flags used in cluster creation The following