com> October 28th-29th, 2020 Why BPF? Why BPF? - Flexibility Why BPF? - Flexibility - Low overhead Why BPF? - Flexibility - Low overhead - Continuous profiling Why BPF? - Flexibility - Low overhead

experiment with Cilium. Getting Started Introduction to Cilium & Hubble What is Cilium? What is Hubble? Why Cilium & Hubble? Functionality Overview Getting Started Guides Installation Observability Network consume from or produce to? Network monitoring & alerting Is any network communication failing? Why is communication failing? Is it DNS? Is it an application or network problem? Is the communication have been accessed from outside the cluster? Which services have resolved a particular DNS name? Why Cilium & Hubble? eBPF is enabling visibility into and control over systems and applications at a granularity

modifica�ons to the Cilium code or documenta�on. Ge�ng Started Introduc�on to Cilium What is Cilium? Why Cilium? Func�onality Overview Ge�ng Started Guides Installa�on Security Tutorials Advanced Networking can be applied and updated without any changes to the applica�on code or container configura�on. Why Cilium? The development of modern datacenter applica�ons has shi�ed to a service- oriented architecture informa�on of both the sender and receiver among a lot of other informa�on. Policy decision tracing: Why is a packet being dropped or a request rejected. The policy tracing framework allows to trace the policy

experiment with Cilium. Getting Started Introduction to Cilium & Hubble What is Cilium? What is Hubble? Why Cilium & Hubble? Functionality Overview Getting Started Guides Installation Network Policy Security consume from or produce to? Network monitoring & alerting Is any network communication failing? Why is communication failing? Is it DNS? Is it an application or network problem? Is the communication have been accessed from outside the cluster? Which services have resolved a particular DNS name? Why Cilium & Hubble? eBPF is enabling visibility into and control over systems and applications at a granularity

modifications to the Cilium code or documentation. Getting Started Introduction to Cilium What is Cilium? Why Cilium? Functionality Overview Getting Started Guides Installation Security Tutorials Advanced Networking can be applied and updated without any changes to the application code or container configuration. Why Cilium? The development of modern datacenter applications has shifted to a service-oriented architecture information of both the sender and receiver among a lot of other information. Policy decision tracing: Why is a packet being dropped or a request rejected. The policy tracing framework allows to trace the policy

experiment with Cilium. Getting Started Introduction to Cilium & Hubble What is Cilium? What is Hubble? Why Cilium & Hubble? Functionality Overview Getting Started Guides Installation Observability Network consume from or produce to? Network monitoring & alerting Is any network communication failing? Why is communication failing? Is it DNS? Is it an application or network problem? Is the communication have been accessed from outside the cluster? Which services have resolved a particular DNS name? Why Cilium & Hubble? eBPF is enabling visibility into and control over systems and applications at a granularity

modifications to the Cilium code or documentation. Getting Started Introduction to Cilium What is Cilium? Why Cilium? Functionality Overview Getting Started Guides Installation Network Policy Security Tutorials can be applied and updated without any changes to the application code or container configuration. Why Cilium? The development of modern datacenter applications has shifted to a service-oriented architecture information of both the sender and receiver among a lot of other information. Policy decision tracing: Why is a packet being dropped or a request rejected. The policy tracing framework allows to trace the policy

documentation. Getting Started Introduction to Cilium & Hubble What is Cilium? What is Hubble? Why Cilium & Hubble? Functionality Overview Getting Started Guides Installation Network Policy Security consume from or produce to? Network monitoring & alerting Is any network communication failing? Why is communication failing? Is it DNS? Is it an application or network problem? Is the communication have been accessed from outside the cluster? Which services have resolved a particular DNS name? Why Cilium & Hubble? BPF is enabling visibility into and control over systems and applications at a granularity

so, here I am ● I break lots of eBPF programs ● The BPF Virtual machine is not easy to understand Why ? The BPF subsystem lives in the kernel AND The kernel can be debugged using gdb The approach

and When You Should Measure CPU Overhead of eBPF Programs Bryce Kahle, Datadog October 28, 2020 Why should I profile eBPF programs? CI variance tracking Tools kernel.bpf_stats_enabled kernel.bpf_stats_enabled