Debugging the BPF Virtual Machine Lorenzo Fontana October 28, 2020 ● Debugging is useful to understand how things work ● Sometimes, eBPF programs can’t even load ● I couldn’t find good resources on this this, so, here I am ● I break lots of eBPF programs ● The BPF Virtual machine is not easy to understand Why ? The BPF subsystem lives in the kernel AND The kernel can be debugged using gdb The

hosts. The following multi node networking models are supported: Overlay: Encapsulation-based virtual network spanning all hosts. Currently VXLAN and Geneve are baked in but all encapsulation formats worker nodes Recommended: Enable PodCIDR allocation (--allocate-node-cidrs) in the kube-controller-manager (recommended) Refer to the section Requirements for detailed instruction on how to prepare your worker nodes Recommended: Enable PodCIDR allocation (--allocate-node-cidrs) in the kube-controller-manager (recommended) Refer to the section Requirements for detailed instruction on how to prepare your

between hosts. The following mul� node networking models are supported: Overlay: Encapsula�on based virtual network spawning all hosts. Currently VXLAN and Geneve are baked in but all encapsula�on formats on all worker nodes Enable PodCIDR alloca�on ( --allocate-node-cidrs ) in the kube-controller-manager (recommended) Refer to the sec�on Requirements for detailed instruc�on on how to prepare your Kubernetes on all worker nodes Enable PodCIDR alloca�on ( --allocate-node-cidrs ) in the kube-controller-manager (recommended) Refer to the sec�on Requirements for detailed instruc�on on how to prepare your Kubernetes

hosts. The following multi node networking models are supported: Overlay: Encapsulation-based virtual network spanning all hosts. Currently VXLAN and Geneve are baked in but all encapsulation formats worker nodes Recommended: Enable PodCIDR allocation (--allocate-node-cidrs) in the kube-controller-manager (recommended) Refer to the section Requirements for detailed instruction on how to prepare your worker nodes Recommended: Enable PodCIDR allocation (--allocate-node-cidrs) in the kube-controller-manager (recommended) Refer to the section Requirements for detailed instruction on how to prepare your

well-equipped to handle modern containerized workloads as well as more traditional workloads such as virtual machines and standard Linux processes. The development of modern datacenter applications has shifted hosts. The following multi node networking models are supported: Overlay: Encapsulation-based virtual network spanning all hosts. Currently VXLAN and Geneve are baked in but all encapsulation formats Networking (beta) Transparent Encryption Host-Reachable Services Kubernetes Without kube-proxy Bandwidth Manager (beta) Kata Containers with Cilium Configuring IPAM modes Local Redirect Policy (beta) BGP (beta)

well-equipped to handle modern containerized workloads as well as more traditional workloads such as virtual machines and standard Linux processes. The development of modern datacenter applications has shifted hosts. The following multi node networking models are supported: Overlay: Encapsulation-based virtual network spanning all hosts. Currently VXLAN and Geneve are baked in but all encapsulation formats run BGP Transparent Encryption Host-Reachable Services Kubernetes Without kube-proxy Bandwidth Manager (beta) Kata Containers with Cilium Configuring IPAM modes Local Redirect Policy (beta) BGP (beta)

well-equipped to handle modern containerized workloads as well as more traditional workloads such as virtual machines and standard Linux processes. The development of modern datacenter applications has shifted hosts. The following multi node networking models are supported: Overlay: Encapsulation-based virtual network spanning all hosts. Currently VXLAN and Geneve are baked in but all encapsulation formats Transparent Encryption (stable/beta) Host-Reachable Services Kubernetes Without kube-proxy Bandwidth Manager (beta) Kata Containers with Cilium Configuring IPAM modes Local Redirect Policy (beta) Operations

well-equipped to handle modern containerized workloads as well as more traditional workloads such as virtual machines and standard Linux processes. The development of modern datacenter applications has shifted hosts. The following multi node networking models are supported: Overlay: Encapsulation-based virtual network spanning all hosts. Currently VXLAN and Geneve are baked in but all encapsulation formats worker nodes Recommended: Enable PodCIDR allocation (--allocate-node-cidrs) in the kube-controller-manager (recommended) Refer to the section Requirements for detailed instruction on how to prepare your

cilium-agent cilium-operator Control Plane kube-api-server cilium-agent kube-controller- manager scheduler ….. etcd VPC digitalocean.com How’s Cilium been working for us? ● Good experience