and operation of Cilium in a single-node Kubernetes cluster. The minikube VM requires approximately 5GB of RAM and supports hypervisors like VirtualBox that run on Linux, macOS, and Windows. Install kubectl READY STATUS RESTARTS AGE cilium-operator-cb4578bc5-q52qk 0/1 Pending 0 8s cilium-s8w5m 0/1 PodInitializing 0 7s core couple of minutes for all components to come up: cilium-operator-cb4578bc5-q52qk 1/1 Running 0 4m13s cilium-s8w5m 1/1 Running 0 4m12s core

layer 4 (TCP) or layer 7 (HTTP)? Which services have experienced a DNS resolution problem in the last 5 minutes? Which services have experienced an interrupted TCP connection recently or have seen connections out? What is the rate of unanswered TCP SYN requests? Application monitoring What is the rate of 5xx or 4xx HTTP response codes for a particular service or across all clusters? What is the 95th and 99th and operation of Cilium in a single-node Kubernetes cluster. The minikube VM requires approximately 5GB of RAM and supports hypervisors like VirtualBox that run on Linux, macOS, and Windows. Install kubectl

Cilium code or documentation. A hands-on tutorial [https://play.instruqt.com/isovalent/invite/j4maqox5r1h5] in a live environment is also available for users looking for a way to quickly get started and experiment layer 4 (TCP) or layer 7 (HTTP)? Which services have experienced a DNS resolution problem in the last 5 minutes? Which services have experienced an interrupted TCP connection recently or have seen connections out? What is the rate of unanswered TCP SYN requests? Application monitoring What is the rate of 5xx or 4xx HTTP response codes for a particular service or across all clusters? What is the 95th and 99th

Cilium code or documentation. A hands-on tutorial [https://play.instruqt.com/isovalent/invite/j4maqox5r1h5] in a live environment is also available for users looking for a way to quickly get started and experiment layer 4 (TCP) or layer 7 (HTTP)? Which services have experienced a DNS resolution problem in the last 5 minutes? Which services have experienced an interrupted TCP connection recently or have seen connections out? What is the rate of unanswered TCP SYN requests? Application monitoring What is the rate of 5xx or 4xx HTTP response codes for a particular service or across all clusters? What is the 95th and 99th

Cilium code or documentation. A hands-on tutorial [https://play.instruqt.com/isovalent/invite/j4maqox5r1h5] in a live environment is also available for users looking for a way to quickly get started and experiment layer 4 (TCP) or layer 7 (HTTP)? Which services have experienced a DNS resolution problem in the last 5 minutes? Which services have experienced an interrupted TCP connection recently or have seen connections out? What is the rate of unanswered TCP SYN requests? Application monitoring What is the rate of 5xx or 4xx HTTP response codes for a particular service or across all clusters? What is the 95th and 99th

and operation of Cilium in a single-node Kubernetes cluster. The minikube VM requires approximately 5GB of RAM and supports hypervisors like VirtualBox that run on Linux, macOS, and Windows. Install kubectl READY STATUS RESTARTS AGE cilium-operator-cb4578bc5-q52qk 0/1 Pending 0 8s cilium-s8w5m 0/1 PodInitializing 0 7s core couple of minutes for all components to come up: cilium-operator-cb4578bc5-q52qk 1/1 Running 0 4m13s cilium-s8w5m 1/1 Running 0 4m12s core

and opera�on of Cilium in a single-node Kubernetes cluster. The minikube VM requires approximately 5GB of RAM and supports hypervisors like VirtualBox that run on Linux, macOS, and Windows. Install kubectl pn6cf 1/1 Running 0 cilium-operator-cb4578bc5-q52qk 0/1 Pending 0 cilium-s8w5m 0/1 PodInitializing 0 cor 1/1 Running 0 2m41s cilium-operator-cb4578bc5-q52qk 1/1 Running 0 4m13s cilium-s8w5m 1/1 Running 0 4m12s coredns-86c58d9df4-4g7dd

prog show pinned /sys/fs/bpf/echo_dispatch_prog 75: sk_lookup name echo_dispatch tag 77fd96f660a5d2ab gpl loaded_at 2020-10-23T09:36:45+0000 uid 0 xlated 304B jited 197B memlock = 4 bpf(BPF_OBJ_GET, {pathname="/home/vagrant/bpffs/echo_socket", …}, …) = 5 bpf(BPF_MAP_UPDATE_ELEM, {map_fd=5, key=0x7fff9c4e0b14, value=0x7fff9c4e0b08}, 120) = 0 +++ exited with 0 +++ $ bpftool attach_type=BPF_SK_LOOKUP, …) = 5 bpf(BPF_OBJ_PIN, {pathname="/sys/fs/bpf/echo_dispatch_link", bpf_fd=5, …) = 0 # bpftool link show pinned /sys/fs/bpf/echo_dispatch_link

PhD student in Vrije Universiteit Amsterdam ● atLarge research group ● Work with eBPF for storage! 5 eBPF and DoS 6 Compute node CPU Network Storage node Flash eBPF and DoS 7 Compute node CPU f-data-filter eBPF filter-reduce 15 If x > 5 max() input Result https://github.com/giuliafrascaria/ebpf-data-filter eBPF filter-reduce 16 If x == 5 count() input Result https://github.com/giul

@beatrizmrg October 28, 2020 2 What will we be doing? 3 How are we going to do it? 4 Demo time 5 Tracing Go function with uprobes 6 Demo time 7 Conclusions ● eBPF programs can be attached to