that runs specific programs when the kernel or an application passes a certain hook point. For example, kernel probes (kprobe) or user probes (uprobe) can be added to attach eBPF tracing programs almost eBPF programs to be loaded in the form of bytecode. Typically, eBPF developers write programs in C, Rust, or other languages, which are then compiled into eBPF bytecode. eBPF programs can be loaded into ready for the cloud-native world. Projects using eBPF for networking include Cilium and Katran, for example. System calls So many messages! At times, some would get lost, Or the engines would struggle under

? ? In This Talk… • Different “types” of BPF programs • Write BPF programs in Rust • Add new feature in RedBPF • Use BPF maps to make stateful decisions • Load the program and protect the Rabbit(MQ) Rabbit(MQ)! About Me • Software Engineer @ CCP Games • @aquarhead on GitHub, Twitter… • Rust (and Elixir) • Disclaimer: new to BPF & kernel networking, pardon my mistake and welcome corrections • RedBPF uses Rust for both in-kernel and user- space programs - benefits from LLVM integration • Rust: expressive type system, modern toolchain - but most importantly, I love Rust! • For networking

container.googleapis.com Create a GKE Cluster You can apply any method to create a GKE cluster. The example given here is using the Google Cloud SDK [h�ps://cloud.google.com/sdk/]. This guide will create a (for example a reverse of FQDN added with short descrip�on of the cluster). Also make sure to use the region where you will be deploying the cluster. aws s3api create-bucket --bucket prefix-example-com-state-store prefix-example-com-state-store --region u export KOPS_STATE_STORE=s3://prefix-example-com-state-store The above steps are sufficient for ge�ng a working cluster installed. Please consult kops aws documenta�on [h�ps://github

container.googleapis.com Create a GKE Cluster You can apply any method to create a GKE cluster. The example given here is using the Google Cloud SDK [https://cloud.google.com/sdk/]. This guide will create (for example a reverse of FQDN added with short description of the cluster). Also make sure to use the region where you will be deploying the cluster. aws s3api create-bucket --bucket prefix-example-com-state-store --create-bucket-configuration LocationConstraint=us- west-2 export KOPS_STATE_STORE=s3://prefix-example-com-state-store The above steps are sufficient for getting a working cluster installed. Please consult

in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Metrics Example Prometheus & Grafana Deployment Metrics Reference Scalability Limiting Identity-Relevant Labels HTB (Hierarchy Token Bucket) or TBF (Token Bucket Filter) as used in the bandwidth CNI plugin, for example. Monitoring and Troubleshooting The ability to gain visibility and to troubleshoot issues is fundamental CILIUM_VERSION=1.9.1 # Please set any custom Helm values you may need for Cilium, # such as for example `--set operator.replicas=1` on single-cluster nodes. helm template cilium cilium/cilium --version

kubernetes cluster. We will explicitly configure their pod-network-cidr and service-cidr to not overlap. Example kind-cluster1.yaml: kind: Cluster apiVersion: kind.x-k8s.io/v1alpha4 nodes: - role: control-plane worker networking: disableDefaultCNI: true podSubnet: 10.0.0.0/16 serviceSubnet: 10.1.0.0/16 Example kind-cluster2.yaml: kind: Cluster apiVersion: kind.x-k8s.io/v1alpha4 nodes: - role: control-plane container.googleapis.com Create a GKE Cluster You can apply any method to create a GKE cluster. The example given here is using the Google Cloud SDK [https://cloud.google.com/sdk/]. export CLUSTER_NAME=cluster1

policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Metrics Example Prometheus & Grafana Deployment Metrics Reference Scalability Limiting Identity-Relevant Labels different subnets that do not conflict or you risk having connectivity issues when deploying Cilium. For example: networking: disableDefaultCNI: true podSubnet: "10.10.0.0/16" serviceSubnet: "10.11.0.0/16" hubble-linux-amd64.tar.gz and move the hubble CLI to a directory listed in the $PATH environment variable. For example: sudo mv hubble /usr/local/bin Download the latest hubble release: export HUBBLE_VERSION=$(curl

in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Metrics Example Prometheus & Grafana Deployment Metrics Reference Performance & Scalability Tuning Guide CNI Performance HTB (Hierarchy Token Bucket) or TBF (Token Bucket Filter) as used in the bandwidth CNI plugin, for example. Monitoring and Troubleshooting The ability to gain visibility and to troubleshoot issues is fundamental to read and understand the documentation page on taint effects and unmanaged pods. Below is an example on how to use ClusterConfig [https://eksctl.io/usage/creating- and-managing-clusters/#using-config-files]

in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Metrics Example Prometheus & Grafana Deployment Metrics Reference Performance & Scalability Tuning Guide CNI Performance HTB (Hierarchy Token Bucket) or TBF (Token Bucket Filter) as used in the bandwidth CNI plugin, for example. Monitoring and Troubleshooting The ability to gain visibility and to troubleshoot issues is fundamental to read and understand the documentation page on taint effects and unmanaged pods. Below is an example on how to use ClusterConfig [https://eksctl.io/usage/creating- and-managing-clusters/#using-config-files]

memory access Perf hardware breakpoint implementation: mem:[:access] [Hardware breakpoint] Example: perf stat -e mem:0xffffffffbb65f478:rw 01 https://www.kernel.org/doc/ols/2009/ols2009-pages-149-158