Steering connections to sockets with BPF socket lookup hook Jakub Sitnicki, Cloudflare @jkbs0 @cloudflare October 28-29, 2020 Who am I? ● Software Engineer at Cloudflare Spectrum TCP/UDP reverse proxy

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1719 14 Database error handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . can define very flexible problem thresholds, called triggers, referencing values from the backend database Highly configurable alerting • sending notifications can be customized for the escalation schedule stored in a database • configurable history • built-in housekeeping procedure Easy configuration • add monitored devices as hosts • hosts are picked up for monitoring, once in the database • apply templates

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1805 14 Database error handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . can define very flexible problem thresholds, called triggers, referencing values from the backend database Highly configurable alerting • sending notifications can be customized for the escalation schedule stored in a database • configurable history • built-in housekeeping procedure Easy configuration • add monitored devices as hosts • hosts are picked up for monitoring, once in the database • apply templates

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1542 12 Database error handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . can define very flexible problem thresholds, called triggers, referencing values from the backend database Highly configurable alerting • sending notifications can be customized for the escalation schedule stored in a database • configurable history • built-in housekeeping procedure Easy configuration • add monitored devices as hosts • hosts are picked up for monitoring, once in the database • apply templates

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1669 12 Database error handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . can define very flexible problem thresholds, called triggers, referencing values from the backend database Highly configurable alerting • sending notifications can be customized for the escalation schedule stored in a database • configurable history • built-in housekeeping procedure Easy configuration • add monitored devices as hosts • hosts are picked up for monitoring, once in the database • apply templates

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1658 12 Database error handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . can define very flexible problem thresholds, called triggers, referencing values from the backend database Highly configurable alerting • sending notifications can be customized for the escalation schedule stored in a database • configurable history • built-in housekeeping procedure Easy configuration • add monitored devices as hosts • hosts are picked up for monitoring, once in the database • apply templates

mod_lbmethod_heartbeat Allow mod_proxy_balancer to base loadbalancing decisions on the number of active connections on the backend servers. mod_proxy_html Formerly a third-party module, this supports fixing of form-based authentication. mod_session Enables the use of session state for clients, using cookie or database storage. mod_allowmethods New module to restrict certain HTTP methods without interfering with handling of timeouts. This is especially useful for setups where a stateful firewall drops idle connections to the LDAP server. mod_ldap adds LDAPLibraryDebug to log debug information provided by the used

mod_lbmethod_heartbeat Allow mod_proxy_balancer to base loadbalancing decisions on the number of active connections on the backend servers. mod_proxy_html Formerly a third-party module, this supports fixing of form-based authentication. mod_session Enables the use of session state for clients, using cookie or database storage. mod_allowmethods New module to restrict certain HTTP methods without interfering with handling of timeouts. This is especially useful for setups where a stateful firewall drops idle connections to the LDAP server. mod_ldap adds LDAPLibraryDebug to log debug information provided by the used

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1849 12 Database error handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . can define very flexible problem thresholds, called triggers, referencing values from the backend database Highly configurable alerting • sending notifications can be customized for the escalation schedule stored in a database • configurable history • built-in housekeeping procedure Easy configuration • add monitored devices as hosts • hosts are picked up for monitoring, once in the database • apply templates

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1790 12 Database error handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . can define very flexible problem thresholds, called triggers, referencing values from the backend database Highly configurable alerting • sending notifications can be customized for the escalation schedule stored in a database • configurable history • built-in housekeeping procedure Easy configuration • add monitored devices as hosts • hosts are picked up for monitoring, once in the database • apply templates