Running pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration Core Agent Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Debugging: Running End-To-End Tests In Other Environments via kubeconfig Running End-To-End Tests In Other Environments Further Assistance Unit Testing Prerequisites Running all tests Testing individual packages Running individual tests Automatically run unit tests on code changes BPF and XDP Reference Guide BPF Architecture

Running pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration Core Agent Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Debugging: Running End-To-End Tests In Other Environments via kubeconfig Running End-To-End Tests In Other Environments Assistance Integration Testing Prerequisites Running all tests Testing individual packages Running individual tests Automatically run unit tests on code changes BPF and XDP Reference Guide BPF Architecture

Rate Limits Configuration Automatic Adjustment Metrics Understanding the log output Configuration Core Agent Monitoring & Metrics Installation cilium-agent cilium-operator Troubleshooting Component Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Debugging: Running End-To-End Tests In Other Environments via kubeconfig Running End-To-End Tests In Other Environments Further Assistance Unit Testing Prerequisites Running all tests Testing individual packages Running individual tests Automatically run unit tests on code changes BPF and XDP Reference Guide BPF Architecture

tion] to test that the cluster is setup properly and that Cilium CNI and security policies are functional. Deleting a Cluster To undo the dependencies and other deployment features in AWS from the kops cilium_version: "v1.2.0". $ ansible-playbook -i ./inventory/hosts ./cluster.yml -e ansible_user=core -e bootstrap_os=coreos -e kube_network_plugin=cilium -b --become-user=root --flush-cache -e ans successfully, ssh into the bastion host with the user core. # Get information about the basiton host $ cat ssh-bastion.conf $ ssh -i ~/path/to/ec2-key-file.pem core@public_ip_of_bastion_host Execute the commands

Running pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration Core Agent Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Debugging: Running End-To-End Tests In Other Environments via kubeconfig Running End-To-End Tests In Other Environments Further Assistance Unit Testing Prerequisites Running all tests Testing individual packages Running individual tests Automatically run unit tests on code changes BPF and XDP Reference Guide BPF Architecture

Running pre-flight check (Required) Upgrading Cilium Version Specific Notes Advanced Configuration Core Agent Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer Running End-To-End Tests Test Reports Best Practices for Writing Tests Ginkgo Extensions Debugging: Running End-To-End Tests In Other Environments via kubeconfig Running End-To-End Tests In Other Environments Further Assistance Unit Testing Prerequisites Running all tests Testing individual packages Running individual tests Automatically run unit tests on code changes BPF and XDP Reference Guide BPF Architecture

/inventory/hosts ./cluster.yml -e ansible_user=core Validate Cluster To check if cluster is created successfully, ssh into the bas�on host with the user core . # Get information about the basiton host host $ cat ssh-bastion.conf $ ssh -i ~/path/to/ec2-key-file.pem core@public_ip_of_bastion_host Execute the commands below from the bas�on host. If kubectl isn’t installed on the bas�on host, you can login false . If you plan to test Cilium in your cluster and remove Cilium once you have finished your tests, se�ng the op�on with true will make sure the Cilium will clean up all BPF programs generated for

enabled everywhere ● Programs and their combinations are heavily tested, incl. multi-kernel VM tests (qemu) ● Resource usage (CPU cycles, memlock) monitored across the fleet by bpf_tax tool → ● Alerts

BPF sk_lookup program https://github.com/torvalds/linux/blob/v5.9/tools/testing/selftests/bpf/prog_tests/sk_lookup.c https://github.com/torvalds/linux/blob/v5.9/tools/testing/selftests/bpf/progs/test_sk_lookup

同时支持用户态插桩 全栈覆盖 ✅ uprobe ✅ kprobe ✅ tracepoint ✅ USDT ✅ perf ✅ … eBPF的编程实践 bcc libbpf + bpf + core 编程  bcc 依靠运行时汇编，将整个大型LLVM/Clang 库带入并嵌入其中  编译过程中资源用量大，对Cpu、Mem有要求  依赖内核的头包  bpf 程序跟其他的用户空间的程序没有太大区别