eBPF Summit October 28, 2020 Debugging Go in production using eBPF ABOUT ME ? i’m Zain @zainasgar Co-Founder/CEO Pixie (@pixie_run) & Adjunct Professor of CS @ Stanford DEVELOPER PROBLEM You’re ing/trace_example DEMO: Go Argument Tracer ● Utilizing tracepoints for dynamic logging allows for easy instrumentation of production binaries ● The complexities of the Go ABI make it difficult to do

How to ship BPF with your Go project Lorenz Bauer October 28, 2020 Goal ● Count the number of packets on lo ● Print the count to the console ● From a single Go binary Use the source, Luke github github.com/lmb/ship-bpf-with-go github.com/cilium/ebpf

approaches such as HTB (Hierarchy Token Bucket) or TBF (Token Bucket Filter) as used in the bandwidth CNI plugin, for example. Monitoring and Troubleshooting The ability to gain visibility and to troubleshoot cluster using Azure Kubernetes Service [https://docs.microsoft.com/en-us/azure/aks/] with no CNI plugin pre-installed (BYOCNI). See Azure Cloud CLI [https://docs.microsoft.com/en-us/cli/azure/install-azure-cli cluster az aks create \ --resource-group "${AZURE_RESOURCE_GROUP}" \ --name "${NAME}" \ --network-plugin none # Get the credentials to access the cluster with kubectl az aks get-credentials --resource-group

Using Istio Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux are exported via Prometheus for integration with your existing dashboards. Integrations Network plugin integrations: CNI [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] ca60a424ce69a4d79f502650199ca2b52f29e631 3. Create a minikube cluster: minikube start --network-plugin=cni --memory=4096 4. Mount the BPF filesystem minikube ssh -- sudo mount bpffs -t bpf /sys/fs/bpf

approaches such as HTB (Hierarchy Token Bucket) or TBF (Token Bucket Filter) as used in the bandwidth CNI plugin, for example. Monitoring and Troubleshooting The ability to gain visibility and to troubleshoot cluster using Azure Kubernetes Service [https://docs.microsoft.com/en-us/azure/aks/] with no CNI plugin pre-installed (BYOCNI). See Azure Cloud CLI [https://docs.microsoft.com/en-us/cli/azure/install-azure-cli cluster az aks create \ --resource-group "${AZURE_RESOURCE_GROUP}" \ --name "${NAME}" \ --network-plugin none # Get the credentials to access the cluster with kubectl az aks get-credentials --resource-group

and alerting, and application and security visibility based on flow logs. Integrations Network plugin integrations: CNI [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] minikube start --network-plugin=cni --memory=4096 # Only available for minikube >= v1.12.1 minikube start --cni=cilium --memory=4096 Note From minikube v1.12.1+, cilium networking plugin can be enabled directly directly with -- network-plugin=cilium parameter in minikube start command. With this flag enabled, minikube will not only mount eBPF file system but also deploy quick- install.yaml automatically. 4. Mount

Using Istio Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux and alerting, and application and security visibility based on flow logs. Integrations Network plugin integrations: CNI [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] ca60a424ce69a4d79f502650199ca2b52f29e631 3. Create a minikube cluster: minikube start --network-plugin=cni --memory=4096 4. Mount the BPF filesystem minikube ssh -- sudo mount bpffs -t bpf /sys/fs/bpf

approaches such as HTB (Hierarchy Token Bucket) or TBF (Token Bucket Filter) as used in the bandwidth CNI plugin, for example. Monitoring and Troubleshooting The ability to gain visibility and to troubleshoot and alerting, and application and security visibility based on flow logs. Integrations Network plugin integrations: CNI [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] ca60a424ce69a4d79f502650199ca2b52f29e631 3. Create a minikube cluster: minikube start --network-plugin=cni --memory=4096 Note If minikube is deployed as a container (that is if docker is the configured

Started Using Is�o Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administra�on System Requirements Summary Linux Distribu�on Compa�bility Matrix Linux Kernel metrics are exported via Prometheus for integra�on with your exis�ng dashboards. Integrations Network plugin integra�ons: CNI [h�ps://github.com/containernetworking/cni], libnetwork [h�ps://github.com/docker/libnetwork] minikube version minikube version: v0.33.1 Create a minikube cluster: minikube start --network-plugin=cni --memory=4096 Note that in case of installing Cilium for a specific Kubernetes version, the

Error()) } links = append(links, pl) return nil } bpf2go 01. 副标题 //go:generate go run github.com/cilium/ebpf/cmd/bpf2go -cc clang -cflags $BPF_CFLAGS -type insp_pl_event_t - type insp_pl_metric_t /bpf/packetloss.c -- -I../../../../bpf/headers -D__TARGET_ARCH_x86 1、安装环境 2、写好bpf.c和bpf.h,放到指定目录 3、go generate 获取转换后的go文件 构建完整的应用可观测系统 第五部分 架构感知 JMeter testdemo1 testdemo2 Mysql Redis Kafka hcmine 节点