eBPF Summit October 28, 2020 Debugging Go in production using eBPF ABOUT ME ? i’m Zain @zainasgar Co-Founder/CEO Pixie (@pixie_run) & Adjunct Professor of CS @ Stanford DEVELOPER PROBLEM You’re ing/trace_example DEMO: Go Argument Tracer ● Utilizing tracepoints for dynamic logging allows for easy instrumentation of production binaries ● The complexities of the Go ABI make it difficult to do

How to ship BPF with your Go project Lorenz Bauer October 28, 2020 Goal ● Count the number of packets on lo ● Print the count to the console ● From a single Go binary Use the source, Luke github github.com/lmb/ship-bpf-with-go github.com/cilium/ebpf

Using Istio Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] Container runtime events: containerd [https://github.com/containerd/containerd] Kubernetes: NetworkPolicy [https://kubernetes background. Running kubectl get pods,svc will inform you about the progress of the operation. Each pod will go through several states until it reaches Running at which point the pod is ready. $ kubectl get pods

Using Istio Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux Building Container Images Developer images Official release images Update cilium-builder and cilium-runtime images Nightly Docker image Release Management Organization Release tracking Release Cadence [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] Container runtime events: containerd [https://github.com/containerd/containerd] Kubernetes: NetworkPolicy [https://kubernetes

Docker BuildKit and Buildx support Official Cilium repositories Update cilium-builder and cilium-runtime images Nightly Docker image Code Overview High-level Cilium Hubble Important common packages Debugging Kubernetes Without kube-proxy, AWS ENI, and dedicated etcd cluster for Cilium. This guide will just go through a basic setup. Prerequisites aws cli [https://aws.amazon.com/cli/] kubectl [https://kubernetes information on the configuration options kops offers. See the kops cluster spec documentation [https://pkg.go.dev/k8s.io/kops/pkg/apis/kops? tab=doc#CiliumNetworkingSpec] for a comprehensive list of all the options

Developer images Official release images Official Cilium repositories Update cilium-builder and cilium-runtime images Nightly Docker image Code Overview High-level Cilium Hubble Important common packages Debugging [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] Container runtime events: containerd [https://github.com/containerd/containerd] Kubernetes: NetworkPolicy [https://kubernetes Kubernetes Without kube-proxy, AWS ENI, and dedicated etcd cluster for Cilium. This guide will just go through a basic setup. Prerequisites aws cli [https://aws.amazon.com/cli/] kubectl [https://kubernetes

Docker BuildKit and Buildx support Official Cilium repositories Update cilium-builder and cilium-runtime images Nightly Docker image Image Building Process Code Overview High-level Cilium Hubble Important Kubernetes Without kube-proxy, AWS ENI, and dedicated etcd cluster for Cilium. This guide will just go through a basic setup. Prerequisites aws cli [https://aws.amazon.com/cli/] kubectl [https://kubernetes information on the configuration options kops offers. See the kops cluster spec documentation [https://pkg.go.dev/k8s.io/kops/pkg/apis/kops? tab=doc#CiliumNetworkingSpec] for a comprehensive list of all the options

Building Container Images Developer images Official release images Update cilium-builder and cilium-runtime images Nightly Docker image Code Overview High-level Cilium Hubble Important common packages Debugging [https://github.com/containernetworking/cni], libnetwork [https://github.com/docker/libnetwork] Container runtime events: containerd [https://github.com/containerd/containerd] Kubernetes: NetworkPolicy [https://kubernetes Kubernetes without kube-proxy, AWS ENI, and dedicated etcd cluster for Cilium. This guide will just go through a basic setup. Prerequisites aws cli [https://aws.amazon.com/cli/] kubectl [https://kubernetes

Started Using Is�o Docker Cilium with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administra�on System Requirements Summary Linux Distribu�on Compa�bility Matrix Linux Kernel allows etcd pods to communicate during the bootstrapping phase of Cilium. For Docker as container runtime: K8s 1.15 K8s 1.14 K8s 1.13 K8s 1.12 K8s 1.11 K8s 1.10 kubectl apply -f https://raw.githubusercontent kubectl apply -f https://raw.githubusercontent.com/cilium/cilium/v1.5/exam For CRI-O as container runtime: K8s 1.15 K8s 1.14 K8s 1.13 K8s 1.12 K8s 1.11 K8s 1.10 kubectl apply -f https://raw.githubusercontent

soon heard of possible improvement options. eBee’s fellows were zealous bees, aiming for speed: “We’d go faster, for sure, with buzz code instructions.” “This would be much simpler for us to parse and read it marked the beginning Of a whole new era for data sharing and messaging. Mail was still slow to go through the ship’s processors, But the electrician bee had a great idea. And so the swarm replaced repelled in a blast! eBPF can be used in conjunction with Linux Security Modules (LSM) to allow runtime instrumentation of the LSM hooks. eBPF combines seeing and understanding all system calls with a