[B! ebpf] takaya030ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

takaya030 id:takaya030

ebpfã«é–¢ã™ã‚‹takaya030ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (11)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

bpftraceã«ã‚ˆã‚‹Goã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒˆãƒ¬ãƒ¼ã‚¹ï½œhayajo
ã¯ã˜ã‚ã«ã‚·ã‚¹ãƒ†ãƒ ã®çŠ¶æ…‹ã‚’çš„ç¢ºã«æ‰ãˆã€é‹ç”¨ã«å¿…è¦ãªã‚¤ãƒ³ã‚µã‚¤ãƒˆã‚’ç¶™ç¶šçš„ã«å¾—ã‚‹ãŸã‚ã®ç‰¹æ€§ã¯ã€Œã‚ªãƒ–ã‚¶ãƒ¼ãƒãƒ“ãƒªãƒ†ã‚£ã€ã¨å‘¼ã°ã‚Œã¾ã™ã€‚ã‚ªãƒ–ã‚¶ãƒ¼ãƒãƒ“ãƒªãƒ†ã‚£ã‚’å®Ÿç¾ã™ã‚‹ã“ã¨ã§ã€ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã®ãƒ¢ãƒ‹ã‚¿ãƒªãƒ³ã‚°ã‚„ãƒˆãƒ©ãƒ–ãƒ«ã‚·ãƒ¥ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚’åŠ¹æžœçš„ã«è¡Œã„ã€ã‚·ã‚¹ãƒ†ãƒ ã®ä¿¡é ¼æ€§ã‚’é«˜ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã®é‡è¦ãªç‰¹æ€§ã‚’å®Ÿç¾ã™ã‚‹ä¸Šã§ã€eBPFã‚„bpftraceã¯å¼·åŠ›ãªãƒ„ãƒ¼ãƒ«ã¨ãªã‚Šã¾ã™ã€‚ æœ¬è¨˜äº‹ã§ã¯ã€Goã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ãŠã‘ã‚‹ã‚ªãƒ–ã‚¶ãƒ¼ãƒãƒ“ãƒªãƒ†ã‚£ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã®ä¸€ã¤ã®æ–¹æ³•ã¨ã—ã¦ã€bpftraceã‚’ç”¨ã„ãŸãƒˆãƒ¬ãƒ¼ã‚¹ã®æ‰‹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ å†…å®¹ãŒå¤šã„ãŸã‚ã€ç›®æ¬¡ã‚’æ´»ç”¨ã—ã¦æ®µéšŽçš„ã«èªã¿é€²ã‚ã‚‹ã“ã¨ã‚’ãŠå‹§ã‚ã—ã¾ã™ã€‚ eBPFã¨bpftraceã¯ã˜ã‚ã«ã€eBPFã¨bpftraceã«ã¤ã„ã¦ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ eBPFã¨ã¯eBPF(Extended Berkeley Packet Filter)ã¯Linuxã‚«ãƒ¼ãƒãƒ«å†…ã§å‹•ä½œã™ã‚‹æŸ”è»Ÿãªãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ•ãƒ¬ãƒ¼
takaya030 2024/03/30
ebpf

golang
ãƒªãƒ³ã‚¯
Linuxã‚³ãƒ³ãƒ†ãƒŠã®ä»•çµ„ã¿ / eBPF & Container Study in Fukuoka
ã€ŒeBPF & ã‚³ãƒ³ãƒ†ãƒŠæƒ…å ±äº¤æ›ä¼š @ ç¦å²¡ã€ã®ç™ºè¡¨è³‡æ–™ã§ã™ã€‚ å‚è€ƒã¨ãªã‚‹æƒ…å ±ã«ã¯PDFä¸ã‹ã‚‰ãƒªãƒ³ã‚¯ã‚’ã—ã¦ã„ã¾ã™ãŒã€è³‡æ–™ä¸ã®ãƒªãƒ³ã‚¯ã¯ Speaker Deck ä¸Šã§ã¯ã‚¯ãƒªãƒƒã‚¯ã§ããªã„ã®ã§ PDF ã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ã¦ã”è¦§ãã ã•ã„ã€‚ ãƒ‡ãƒ¢ã®å‹•ç”»ã¯ https://asciinema.org/a/BbYcâ€¦
takaya030 2024/02/19
linux

ebpf
ãƒªãƒ³ã‚¯
Kubernetesã‚¯ãƒ©ã‚¹ã‚¿ã®å¯è¦³æ¸¬æ€§ã®éš™é–“ã‚’åŸ‹ã‚ã‚‹eBPF - LIFULL Creators Blog
KEELãƒãƒ¼ãƒ ã®ç›¸åŽŸã§ã™ã€‚ ä»Šå›žã¯eBPFã‚’åˆ©ç”¨ã—ã¦Kubernetesã‚¯ãƒ©ã‚¹ã‚¿ã®å¯è¦³æ¸¬æ€§ã®éš™é–“ã‚’åŸ‹ã‚ã¦ã„ã‚‹è©±ã§ã™ã€‚ å‰å›žã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯LLMã«ã†ã¤ã¤ã‚’æŠœã‹ã—ã¦ã„ãŸã®ã§æœ¬æ¥(?)ã®è©±ã‚’ã—ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ www.lifull.blog LIFULLã®å¯è¦³æ¸¬æ€§ã®ç¾åœ¨åœ° eBPFã¨ã¯ å¯è¦³æ¸¬æ€§ã®éš™é–“ NAT Loopback eBPFã‚’å®Ÿè¡Œã™ã‚‹ã«ã¯ BPF CO-RE libbpf-rsã‚’åˆ©ç”¨ã—ãŸNAT Loopbackã®æ¤œçŸ¥ 1. (ãƒ¦ãƒ¼ã‚¶ç©ºé–“) ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³å¼•æ•°ã¨ã—ã¦å—ã‘å–ã£ãŸDNSã‚’TTLã”ã¨ã«åå‰è§£æ±ºã—ã¦IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å–å¾—ã™ã‚‹ 2. (ãƒ¦ãƒ¼ã‚¶ç©ºé–“) IPã‚¢ãƒ‰ãƒ¬ã‚¹ã«å¤‰åŒ–ãŒã‚ã‚‹åº¦ã«ã‚«ãƒ¼ãƒãƒ«ç©ºé–“ã§å‹•ãBPFãƒ—ãƒã‚°ãƒ©ãƒ ã«ãã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ãƒªã‚¹ãƒˆã‚’æ¸¡ã™ 3. (ã‚«ãƒ¼ãƒãƒ«ç©ºé–“) Kprobesã§ tcp_v4_connect/tcp_v6_connect ã«ãƒ•ãƒƒã‚¯ã‚’ä»•è¾¼ã‚€ 4. (ã‚«ãƒ¼ãƒãƒ«ç©ºé–“)
takaya030 2024/02/01
ebpf

kube
ãƒªãƒ³ã‚¯
Tetragonã§eBPFã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ªãƒ–ã‚µãƒ¼ãƒãƒ“ãƒªãƒ†ã‚£å…¥é–€ | ãƒ•ãƒ¥ãƒ¼ãƒãƒ£ãƒ¼æŠ€è¡“ãƒ–ãƒã‚°
CNCFé€£è¼‰ ã®4æœ¬ç›®ã§ã™ã€‚ ã¯ã˜ã‚ã«æ•°å¹´å‰ã«ã‚¯ãƒ©ã‚¦ãƒ‰ãƒã‚¤ãƒ†ã‚£ãƒ–æ³¨ç›®æŠ€è¡“ã¨ã—ã¦æŒ™ã’ã‚‰ã‚ŒãŸeBPFã«ã‹ãã¦ã‚ˆã‚Šã‚ãƒ£ãƒƒãƒã‚¢ãƒƒãƒ—ã—ãŸã„ãªã¨æ€ã£ã¦ã„ãŸã®ã§ã€ã“ã®é€£è¼‰ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§eBPFã¨ãã®é–¢é€£ãƒ—ãƒãƒ€ã‚¯ãƒˆã«å…¥é–€ã—ã¦ã¿ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ CNCFãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆå‚˜ä¸‹ã®eBPFã‚’æ´»ç”¨ã—ãŸãƒ—ãƒãƒ€ã‚¯ãƒˆã¨ã—ã¦ã¯Cilium, Falcoãªã©ãŒæŒ™ã’ã‚‰ã‚Œã¾ã™ã€‚Ciliumã¯Kubernetesãªã©ã®ã‚¯ãƒ©ã‚¦ãƒ‰ãƒã‚¤ãƒ†ã‚£ãƒ–ãªç’°å¢ƒã§ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã€ã‚ªãƒ–ã‚µãƒ¼ãƒãƒ“ãƒªãƒ†ã‚£ã®æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹OSSãªã®ã§ã™ãŒã€ä»Šå›žã¯ãã®ã„ã‚ã°ã‚µãƒ–ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆçš„ãªä½ç½®ã¥ã‘ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ„ãƒ¼ãƒ«ã§ã‚ã‚‹ã€Tetragonã«è§¦ã£ã¦ã¿ã¾ã™ã€‚ Cilium, Tetragonã®é–‹ç™ºã‚’ãƒ¡ã‚¤ãƒ³è¡Œã£ã¦ã„ã‚‹Isovalentç¤¾ã¯ã€æ›¸ç±ã‚„ãƒãƒ³ã‚ºã‚ªãƒ³ãƒ©ãƒœãªã©ã§è‡ªç¤¾ã®è£½å“ãƒ»eBPFã«ã¤ã„ã¦ã®å¦ç¿’ãƒªã‚½ãƒ¼ã‚¹ã‚’å¤šãæä¾›ã—ã¦ã„ã¾ã™ã€‚ https://isovalent.com/reso
takaya030 2023/06/24
tetragon

ebpf
ãƒªãƒ³ã‚¯
Linuxã‚«ãƒ¼ãƒãƒ«ã‚’ãƒ•ãƒƒã‚¯ã™ã‚‹eBPFã«ã‚ˆã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã‚’ã€Kubernetesã«åŠ ãˆã¦VMã‚„ãƒ‘ãƒ–ãƒªãƒƒã‚¯ã‚¯ãƒ©ã‚¦ãƒ‰ã¾ã§æ‹¡å¤§ã™ã‚‹ã€ŒCilium Meshã€ãŒç™»å ´
Linuxã‚«ãƒ¼ãƒãƒ«ã‚’ãƒ•ãƒƒã‚¯ã™ã‚‹eBPFã«ã‚ˆã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã‚’ã€Kubernetesã«åŠ ãˆã¦VMã‚„ãƒ‘ãƒ–ãƒªãƒƒã‚¯ã‚¯ãƒ©ã‚¦ãƒ‰ã¾ã§æ‹¡å¤§ã™ã‚‹ã€ŒCilium Meshã€ãŒç™»å ´ Linuxã®ã‚«ãƒ¼ãƒãƒ«ã‚’ãƒ•ãƒƒã‚¯ã™ã‚‹ã€ŒeBPFã€ï¼ˆextended Berkeley Packet Filterï¼‰ã¨å‘¼ã°ã‚Œã‚‹ä»•çµ„ã¿ã‚’ç”¨ã„ã¦ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã‚’æ§‹æˆã™ã‚‹ã€ŒCiliumã€ãªã©ã‚’é–‹ç™ºã™ã‚‹Isovalentã¯ã€Kubernetesã ã‘ã§ãªãä»®æƒ³ãƒžã‚·ãƒ³ã‚„ãƒ‘ãƒ–ãƒªãƒƒã‚¯ã‚¯ãƒ©ã‚¦ãƒ‰ã¾ã§ã‚’ã‚«ãƒãƒ¼ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã‚’å®Ÿç¾ã™ã‚‹ã€ŒCilium Meshã€ã‚’ç™ºè¡¨ã—ã¾ã—ãŸã€‚ Introducing Cilium Mesh. Cilium & eBPF powered networking, security, and observability for VMs, servers, and existing networks across cloud,
takaya030 2023/04/19
kube

ebpf

cilium
ãƒªãƒ³ã‚¯
Istioã€ã‚µã‚¤ãƒ‰ã‚«ãƒ¼ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’ä¸è¦ã«ã™ã‚‹ã€ŒAmbient Service Meshã€æ©Ÿèƒ½ã‚’ãƒ¡ã‚¤ãƒ³ãƒ–ãƒ©ãƒ³ãƒã«çµ±åˆã€æ£å¼ãªæ©Ÿèƒ½ã¸
Istioã¯ã€ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã‚’å®Ÿç¾ã™ã‚‹æ–°ãŸãªä»•çµ„ã¿ã¨ã—ã¦è©¦é¨“çš„ã«é–‹ç™ºã—ã¦ã„ãŸã€ŒAmbient Service Meshã€ã‚’ãƒ¡ã‚¤ãƒ³ãƒ–ãƒ©ãƒ³ãƒã«çµ±åˆã—ã€æ£å¼ãªæ©Ÿèƒ½ã¨ã—ã¦çµ„ã¿è¾¼ã‚“ã§è¡Œãæ–¹é‡ã§ã‚ã‚‹ã“ã¨ã‚’ç™ºè¡¨ã—ã¾ã—ãŸã€‚ ç¾åœ¨ã®Istioã¯ã€å„ã‚µãƒ¼ãƒ“ã‚¹ï¼ˆâ‰’Kubenetesã®Podï¼‰ã”ã¨ã«ãƒ—ãƒã‚ã‚·ã‚’é…ç½®ã—ã€ã‚µãƒ¼ãƒ“ã‚¹é–“ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ãƒ—ãƒã‚ã‚·çµŒç”±ã§æ§‹æˆã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã‚’æ§‹ç¯‰ã—ã¦ã„ã¾ã™ã€‚ã“ã‚Œã«ã‚ˆã‚Šã‚µãƒ¼ãƒ“ã‚¹é–“ã®é€šä¿¡ã®ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚³ãƒ³ãƒˆãƒãƒ¼ãƒ«ã€æš—å·åŒ–ã€å¯è¦³æ¸¬æ€§ï¼ˆã‚ªãƒ–ã‚¶ãƒ¼ãƒãƒ“ãƒªãƒ†ã‚£ï¼‰ãªã©ã®æ©Ÿèƒ½ãŒå®Ÿç¾ã•ã‚Œã‚‹ã‚ã‘ã§ã™ã€‚ ã“ã®ä»•çµ„ã¿ã¯ã€ã‚µãƒ¼ãƒ“ã‚¹ã®éš£ã«ãƒ—ãƒã‚ã‚·ã‚’é…ç½®ã™ã‚‹ã“ã¨ã‹ã‚‰ã€ã€Œã‚µã‚¤ãƒ‰ã‚«ãƒ¼ã€ãƒ‘ã‚¿ãƒ¼ãƒ³ãªã©ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚ ã—ã‹ã—Podã”ã¨ã«ã‚µã‚¤ãƒ‰ã‚«ãƒ¼ã‚’ãƒ‡ãƒ—ãƒã‚¤ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ãŸã‚ã€ã“ã‚Œã«ã‹ã‹ã‚‹æ‰‹é–“ã‚„ãƒªã‚½ãƒ¼ã‚¹ã®æ¶ˆè²»ãŒèª²é¡Œã§ã—ãŸã€‚ eBPFã‚’ç”¨ã„ãŸã‚µã‚¤ãƒ‰ã‚«ãƒ¼ãƒ•ãƒªãƒ¼ãªCiliumã¸æ³¨ç›®ãŒé›†ã¾ã‚‹ ãã†ã—ãŸä¸ã§æœ€
takaya030 2023/04/07
istio

cilium

ebpf
ãƒªãƒ³ã‚¯
eBPFã«3æ—¥ã§å…¥é–€ã—ãŸè©± - CADDi Tech Blog
ã¯ã˜ã‚ã« eBPF ã¨ã¯ãªã«ã‹ ã–ã£ãã‚Šæ¦‚è¦ ã€ŒPacket Filterã€ãªã®ã«ã€ŒVirtual Machineã€? eBPFã§ãªã«ãŒã§ãã‚‹ã‹? ã‚«ãƒ¼ãƒãƒ«ã‚¤ãƒ™ãƒ³ãƒˆã®ãƒ•ãƒƒã‚¯ ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ©ãƒ³ãƒ‰ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã®ã‚„ã‚Šã¨ã‚Š eBPFã®ä¸»ãªç”¨é€” eBPFãŒæ³¨ç›®ã•ã‚Œã‚‹èƒŒæ™¯ eBPFã®ä»•çµ„ã¿ ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã¨å‡¦ç†ãƒ•ãƒãƒ¼ ã‚«ãƒ¼ãƒãƒ«ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨eBPFã®é•ã„ eBPFãƒ—ãƒã‚°ãƒ©ãƒ ã®ä½œã‚Šæ–¹ eBPFãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä½œã£ã¦ã¿ã‚‹ ç’°å¢ƒã®æº–å‚™ Hello world ã‚‚ã†å°‘ã—è¤‡é›‘ãªã‚µãƒ³ãƒ—ãƒ« ãã®ä»–ã®ã‚µãƒ³ãƒ—ãƒ« HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ€ãƒ³ãƒ— TCPæŽ¥ç¶šå…ˆã®èª¿æŸ» tcplife dirtop filetop oomkill ã¾ã¨ã‚ eBPFã¯ãªã«ã«ä½¿ãˆã‚‹ã‹ å‚è€ƒã‚µã‚¤ãƒˆ ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€Platformãƒãƒ¼ãƒ ã®å°æ£®ã§ã™ã€‚ eBPF (extended Berkley Packet Filter) ã«ã¤ã„ã¦ã€2022å¹´8æœˆ2
takaya030 2023/01/14
ebpf

linux

cilium

kube
ãƒªãƒ³ã‚¯
Ciliumã‚’è©¦ã™ -ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã«ã‚µã‚¤ãƒ‰ã‚«ãƒ¼ãŒå¿…é ˆã ã¨æ€ã£ã¦ã„ãŸãŒãã‚“ãªã“ã¨ã¯ãªã‹ã£ãŸãœ- - CADDi Tech Blog
ã“ã‚“ã«ã¡ã¯ã€‚ Platformãƒãƒ¼ãƒ ã®å‰å¤š(@kencharos)ã§ã™ã€‚ 2022å¹´8æœˆ9æ—¥ã«é–‹å‚¬ã—ãŸç¤¾å†…å‹‰å¼·ä¼šã§ã€eBPFãƒ™ãƒ¼ã‚¹ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒŸãƒ‰ãƒ«ã‚¦ã‚§ã‚¢ã€Cilium(ã‚¹ãƒªã‚£ã‚¢ãƒ ) ã«ã¤ã„ã¦ç™ºè¡¨ã—ã¾ã—ãŸã€‚ ã“ã®è¨˜äº‹ã¯ç™ºè¡¨ã®å†…å®¹ã‚’ãƒ™ãƒ¼ã‚¹ã«å†…å®¹ã‚’è£œè¶³ã—ãŸã‚‚ã®ã§ã™ã€‚ ã“ã®è¨˜äº‹ã‚’èªã‚€ã«ã‚ãŸã‚Šã€Kubernetesã‚’ã‚ã‚‹ç¨‹åº¦è§¦ã£ãŸã“ã¨ãŒãªã„ã¨ç”¨èªžãªã©ãŒåˆ†ã‹ã‚Šã¥ã‚‰ã„ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã‚„Istioã«ã¤ã„ã¦ã¯ã€æ§‹æˆã‚„å°Žå…¥ç›®çš„ã«ã¤ã„ã¦ç°¡å˜ã«æ¬¡ç¯€ã«è¨˜è¼‰ã—ã¦ã„ã¾ã™ã€‚ ã‚ˆã‚Šè©³ã—ãçŸ¥ã‚ŠãŸã„æ–¹ã¯Istioã®ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã®èª¬æ˜Žã‚’è¦‹ã¦ã‚‚ã‚‰ãˆã‚‹ã¨ã€Ciliumã¨ã®å¯¾æ¯”ãŒã‚ã‹ã‚Šã‚„ã™ããªã‚‹ã§ã—ã‚‡ã†ã€‚ ã¾ãŸã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã‚’è§¦ã£ãŸã“ã¨ãŒã‚ã‚‹ã€ã‚ã‚‹ã„ã¯é‹ç”¨ã—ã¦ã„ã‚‹æ–¹ã§ã‚ã‚Œã°ã€Ciliumã®é…åŠ›ãŒã‚ˆã‚Šä¼ã‚ã‚‹ã¨æ€ã„ã¾ã™ã€‚ eBPFã®çŸ¥è˜ã¯å¿…è¦ã‚ã‚Šã¾ã›ã‚“ã€‚ã¾ãŸeBPFã«ã¤ã„ã¦åŒåƒšã‚‚ç¤¾å†…å‹‰å¼·ä¼šã§ç™ºè¡¨ã—ã¦ã„ã¾ã™ã®ã§ã€
takaya030 2023/01/14
ebpf

cilium

kube
ãƒªãƒ³ã‚¯
IP ãƒžã‚¹ã‚«ãƒ¬ãƒ¼ãƒ‰ã¨ eBPF ãŒ GKE Autopilot ã§åˆ©ç”¨å¯èƒ½ã« | Google Cloud å…¬å¼ãƒ–ãƒã‚°
â€»ã“ã®æŠ•ç¨¿ã¯ç±³å›½æ™‚é–“ 2022 å¹´ 6 æœˆ 30 æ—¥ã«ã€Google Cloud blog ã«æŠ•ç¨¿ã•ã‚ŒãŸã‚‚ã®ã®æŠ„è¨³ã§ã™ã€‚ Kubernetes ã‚’ãƒ‡ãƒ—ãƒã‚¤ã—ã€ã‚³ãƒ³ãƒ†ãƒŠåŒ–ã•ã‚ŒãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã®æº–å‚™ãŒæ•´ã£ã¦ã„ã‚‹ã¨è€ƒãˆã¦ãã ã•ã„ã€‚ãã“ã§ç›´é¢ã™ã‚‹ã²ã¨ã¤ã®å•é¡Œã¯ã€å¤šæ§˜ãªç’°å¢ƒé–“ã§ IP ãŒæž¯æ¸‡ã—ã¦ã—ã¾ã†ã“ã¨ã§ã™ã€‚ã‚¯ãƒ©ã‚¹ã‚¿ã¯ã‚ªãƒ³ãƒ—ãƒ¬ãƒŸã‚¹ ã‚¯ãƒ©ã‚¹ã‚¿ã¾ãŸã¯ãƒ›ã‚¹ãƒˆã¨é€šä¿¡ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã‚ã‚‹ã„ã¯ã€è¦å‰‡ã‚„ã‚³ãƒ³ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ã®ç†ç”±ã‹ã‚‰ã€ãƒ¯ãƒ¼ã‚¯ãƒãƒ¼ãƒ‰ãŒ RFC 1918 ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã¿ã‚’è¨±å¯ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã¨é€šä¿¡ã™ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ ä¸€èˆ¬æä¾›ã¨ãªã£ãŸæœ€æ–°ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚ãƒ³ã‚°æ©Ÿèƒ½ã‚’ä½¿ã†ã“ã¨ã§ã€GKE Autopilot ã‚¯ãƒ©ã‚¹ã‚¿ã§ Pod IP ã‚’ãƒŽãƒ¼ãƒ‰ IP ã«å¤‰æ›ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ Pod IP ã‹ã‚‰ãƒŽãƒ¼ãƒ‰ IP ã«å¤‰æ›ã™ã‚‹ IP ãƒžã‚¹ã‚«ãƒ¬ãƒ¼ãƒ‰ã‚’å®Ÿè£…ã—ãŸ Egress NAT ãƒãƒªã‚·ãƒ¼ãŒã€GKE Au
takaya030 2023/01/12
IP ãƒžã‚¹ã‚«ãƒ¬ãƒ¼ãƒ‰ã¨ eBPF ãŒ GKE Autopilot ã§åˆ©ç”¨å¯èƒ½ã«

ebpf

gke

kept

kube
ãƒªãƒ³ã‚¯
Bottlerocketã€Calicoã€eBPF ã§ EKS ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ã‚¿ãƒ¼ãƒœãƒãƒ£ãƒ¼ã‚¸ã™ã‚‹ | Amazon Web Services
Amazon Web Services ãƒ–ãƒã‚° Bottlerocketã€Calicoã€eBPF ã§ EKS ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ã‚¿ãƒ¼ãƒœãƒãƒ£ãƒ¼ã‚¸ã™ã‚‹ ã“ã®æŠ•ç¨¿ã¯ã€Tigera, Inc. ã®å…±åŒå‰µè¨è€…å…¼ CTO ã§ã‚ã‚‹ Alex Pollitt ã«ã‚ˆã£ã¦å…±åŒåŸ·ç†ã•ã‚Œã¾ã—ãŸã€‚ å…ˆæ—¥ã€Amazon ã¯ Amazon Elastic Kubernetes Service (Amazon EKS) ä¸Šã§ã® Bottlerocket ã®ã‚µãƒãƒ¼ãƒˆã‚’ç™ºè¡¨ã—ã¾ã—ãŸã€‚Bottlerocket ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€é‹ç”¨ã€ãŠã‚ˆã³ç®¡ç†æ€§ã‚’é‡è¦–ã—ãŸã€ã‚³ãƒ³ãƒ†ãƒŠã‚’å¤§è¦æ¨¡ã«å®Ÿè¡Œã™ã‚‹ãŸã‚ã« Amazon ãŒæ§‹ç¯‰ã—ãŸã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã® Linux ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã§ã™ã€‚Bottlerocket ã®è©³ç´°ã«ã¤ã„ã¦ã¯ã€ã“ã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ãƒ–ãƒã‚°ã‚’ã”è¦§ä¸‹ã•ã„ã€‚ Amazon EKS ã«ã¯ã€Amazon VPC CNI Plugin ã«ã‚ˆã£ã¦ã€
takaya030 2023/01/11
ebpf

eks

kube

aws
ãƒªãƒ³ã‚¯
ã€ŒeBPFã€ãŒã‚¯ãƒ©ã‚¦ãƒ‰ãƒã‚¤ãƒ†ã‚£ãƒ–ã‚’è¶…å¼·åŠ›ã«ã™ã‚‹ã€‚eBPFã¨ã¯ä½•ã‹ï¼Ÿ ä½•ãŒã§ãã¦ã€ã©ã‚“ãªåˆ©ç‚¹ãŒã‚ã‚‹ã®ã‹ï¼Ÿ Cloud Native Days Tokyo 2022åŸºèª¿è¬›æ¼”ã‹ã‚‰
ã€ŒeBPFã€ãŒã‚¯ãƒ©ã‚¦ãƒ‰ãƒã‚¤ãƒ†ã‚£ãƒ–ã‚’è¶…å¼·åŠ›ã«ã™ã‚‹ã€‚eBPFã¨ã¯ä½•ã‹ï¼Ÿ ä½•ãŒã§ãã¦ã€ã©ã‚“ãªåˆ©ç‚¹ãŒã‚ã‚‹ã®ã‹ï¼Ÿ Cloud Native Days Tokyo 2022åŸºèª¿è¬›æ¼”ã‹ã‚‰ 2022å¹´11æœˆ21æ—¥ã¨22æ—¥ã®2æ—¥é–“ã€ã‚¯ãƒ©ã‚¦ãƒ‰ãƒã‚¤ãƒ†ã‚£ãƒ–ã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã—ãŸã‚¤ãƒ™ãƒ³ãƒˆã€ŒCloud Native Days Tokyo 2022ã€ãŒéƒ½å†…ãŠã‚ˆã³ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã®ãƒã‚¤ãƒ–ãƒªãƒƒãƒ‰ã§è¡Œã‚ã‚Œã¾ã—ãŸã€‚ 22æ—¥ã®åŸºèª¿è¬›æ¼”ã«ç™»å ´ã—ãŸã®ã¯ã€Ciliumã€Hubbleã€Tetragonãªã©eBPFã‚’ä¸å¿ƒã¨ã—ãŸã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚’é–‹ç™ºã—ã¦ã„ã‚‹Isovalentã®Tracy P Holmesæ°ã€‚ Homesæ°ã¯ã€ã„ã¾ã‚¯ãƒ©ã‚¦ãƒ‰ãƒã‚¤ãƒ†ã‚£ãƒ–é–¢é€£ã®ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ã¨ã—ã¦æœ€ã‚‚æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹ã¨è¨€ã£ã¦ã‚ˆã„ã€ŒeBPFã€ã‚’ç´¹ä»‹ã™ã‚‹ã‚»ãƒƒã‚·ãƒ§ãƒ³ã€ŒCloud Native Superpowers with eBPFã€ã‚’è¡Œã„ã¾ã—ãŸã€‚ eBPFã¨ã¯ã©ã®ã‚ˆã†ãªãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼ãª
takaya030 2023/01/11
ebpf

kept

kube

linux

monitoring
ãƒªãƒ³ã‚¯
1