存储结 构存储数据，能通过 map 同用户态程序交互， 最终实现内核数据进行修改，或者影响内核处 理请求的结果，或者改变内核处理请求的流程。 极大提升了内核处理事件的效率。 截止 linux 5.14 版本，eBPF 有32种类型程序。而 cilium 主要使用了如下类型程序： • sched_cls 。cilium在内核 TC 处实现数据包转发、负载均衡、过滤 • xdp 。cilium在内核 XDP

snat(skb); redirect(skb); } } CC BY-SA 3.0, https://commons.wikimedia.org/w/index.php?curid=122201 alloc skb TC ingress raw PREROUTING conntrack mangle PREROUTING nat PREROUTING

0 CentOS 7 requires a third-party kernel provided by ElRepo [http://elrepo.org/tiki/tiki- index.php] whereas CentOS 8 ships with a supported kernel. Note The above list is based on feedback by users

0 CentOS 7 requires a third-party kernel provided by ElRepo [http://elrepo.org/tiki/tiki- index.php] whereas CentOS 8 ships with a supported kernel. Note The above list is based on feedback by users

[2] CentOS 7 requires a third-party kernel provided by ElRepo [http://elrepo.org/tiki/tiki- index.php] whereas CentOS 8 ships with a supported kernel. Note The above list is based on feedback by users

7 CentOS 7 requires a third-party kernel provided by ElRepo [http://elrepo.org/tiki/tiki- index.php] whereas CentOS 8 ships with a supported kernel. Note that some more advanced features may not be available

[2] CentOS 7 requires a third-party kernel provided by ElRepo [http://elrepo.org/tiki/tiki- index.php] whereas CentOS 8 ships with a supported kernel. Note The above list is based on feedback by users

7 CentOS 7 requires a third-party kernel provided by ElRepo [http://elrepo.org/tiki/tiki- index.php] whereas CentOS 8 ships with a supported kernel. Note that some more advanced features may not be available