includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information --network-plugin=cni --memory=4096 4. Mount the BPF filesystem minikube ssh -- sudo mount bpffs -t bpf /sys/fs/bpf Note In case of installing Cilium for a specific Kubernetes version, the --kubernetes- Running 0 75s echo-585798dd9d-mk5q8 1/1 Running 0 75s echo-585798dd9d-tn9t4 1/1 Running 0 75s echo-585798dd9d-xmr4p 1/1 Running 0 75s probe-866bb6f696-9lhfw

includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information quick- install.yaml automatically. 4. Mount the eBPF filesystem minikube ssh -- sudo mount bpffs -t bpf /sys/fs/bpf Note In case of installing Cilium for a specific Kubernetes version, the --kubernetes- the BPF Filesystem On each node, run the following to mount the BPF Filesystem: sudo mount bpffs -t bpf /sys/fs/bpf Install Cilium Install Cilium as DaemonSet [https://kubernetes.io/docs/concepts/w

includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information --network-plugin=cni --memory=4096 4. Mount the BPF filesystem minikube ssh -- sudo mount bpffs -t bpf /sys/fs/bpf Note In case of installing Cilium for a specific Kubernetes version, the --kubernetes- the BPF Filesystem On each node, run the following to mount the BPF Filesystem: sudo mount bpffs -t bpf /sys/fs/bpf Install Cilium kubectl create -f https://raw.githubusercontent.com/cilium/cilium/v1

includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information install the latest version of cilium. 4. Mount the eBPF filesystem minikube ssh -- sudo mount bpffs -t bpf /sys/fs/bpf Note In case of installing Cilium for a specific Kubernetes version, the --kubernetes- the eBPF Filesystem On each node, run the following to mount the eBPF Filesystem: sudo mount bpffs -t bpf /sys/fs/bpf Install Cilium Install Cilium as DaemonSet [https://kubernetes.io/docs/concepts/w

includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and des�na�on IP of the packet, the tool provides the full label informa�on of daemon-kubelet.service Install or configure kubectl . Microk8s provides a version of kubectl, so if you don’t otherwise have it installed then you can simply alias the microk8s version: snap alias microk8s.kubectl f9-pn6cf 1/1 Running 0 4m12s cilium-etcd-t695lgxf4x 1/1 Running 0 118s cilium-etcd-zw285m6t9g 1/1 Running 0 2m41s cili

includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information the Troubleshooting section and / or seek help on the Slack channel. Create the Cluster If you don’t have a Kubernetes Cluster yet, you can use the instructions below to create a Kubernetes cluster locally rules added by VPC CNI iptables -t nat -F AWS-SNAT-CHAIN-0 \\ && iptables -t nat -F AWS-SNAT-CHAIN-1 \\ && iptables -t nat -F AWS-CONNMARK-CHAIN-0 \\ && iptables -t nat -F AWS-CONNMARK-CHAIN-1 Some

includes tooling to provide: Event monitoring with metadata: When a packet is dropped, the tool doesn’t just report the source and destination IP of the packet, the tool provides the full label information the Troubleshooting section and / or seek help on the Slack channel. Create the Cluster If you don’t have a Kubernetes Cluster yet, you can use the instructions below to create a Kubernetes cluster locally openshift-install will prompt for credentials and store them in ~/.azure/osServicePrincipal.json, it doesn’t simply pickup az login credentials. It’s recommended to setup a dedicated service principal and use

kernel.org/doc/ols/2009/ols2009-pages-149-158.pdf Implementation void bpf_attach_breakpoint(uint64_t symbol_addr, int pid, int progfd, int bp_type) { struct perf_event_attr attr = {}; memset(&attr, 0 struct stack_key_t { int pid; char name[16]; int user_stack_id; int kernel_stack_id; }; BPF_STACK_TRACE(stack_traces, 16384); BPF_HASH(counts, struct stack_key_t, uint64_t); int func(struct pt_regs pt_regs *ctx) { struct stack_key_t key = {}; key.pid = bpf_get_current_pid_tgid() >> 32; bpf_get_current_comm(&key.name, sizeof(key.name)); key.kernel_stack_id = stack_traces.get_stackid(ctx, 0); key.user_stack_id

2020 ● Debugging is useful to understand how things work ● Sometimes, eBPF programs can’t even load ● I couldn’t find good resources on this, so, here I am ● I break lots of eBPF programs ● The BPF Virtual using gdb The approach We need: ● A kernel image ● A root filesystem ● An eBPF program that doesn’t work ● gdb First - The environment git clone https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next

Let’s meet the passengers!” The Silver Lining’s passengers had long been complaining They couldn’t send messages in their own encoding. When the bees jumped on the case, it marked the beginning Of a the quantic guidance units? New versions all had a completely different shape. eBee’s friends couldn’t fly between the narrower bits. Had the engine-hacking adventure met its fate? “Not a chance” said eBee https://phippy.io The crab is based on Ferris, the unofficial Rust mascot, designed by Karen Rustad Tölva. It is licensed under Creative Commons Zero (CC0-1.0, Public Domain Dedication). See https://rustacean