## RUST CHINA CONF 2023 第三届中国 Rust 开发者大会 6.17-6.18 @Shanghai ## THE FIRST EXPLORATION OF PROJECT SPARROW Feng Li（李枫） hkli2013@126.com Jun 18, 2023 ## Who Am I  & «Linux Hardening in Hostile Networks, First Edition» (ISBN: 9787115544384) Pure software development for ~15 years(~11 years on Mobile dev) buffer overflows, arithmetic exceptions or use of uninitialized variables. seL4 is claimed to be the first-ever general-purpose operating-system kernel that has been verified. $ ^{[17]} $ seL4 takes a novel

## I stio As An ## API Gateway ## Discussion Flow • What is an API Gateway? • What is a Service Mesh? Common Features API Gateway + Service Mesh together! Istio as the API Gateway Advantages • • Challenges • Where It Isn’t a Good Fit? ## What is an API Gateway? Service A Service B Service C  Service A Service Deployment • Traffic Mirroring • Rate Limiting • TLS Termination Logging, Monitoring, Tracing ## API Gateway + Service Mesh together! ![Image](/uploads/documents/d/0/d/3/d0d3d2bc8b937de314f4192c01e9d77f/p14_1

## Apifox ## API 设计、开发、测试 一体化协作平台 ## 行业情况  数字化转型  ## 常用解决方案 API 设计者 后端开发 Swagger API 文档设计 {…} ☐ Postman API 开发调试 Mock.js API 数据Mock 鱼 JMeter API 自动化测试 API 压力测试 前端开发 测试人员 ## 存在问题 API设计者、前端开发、后端开发、测试人员大量重复工作。 可视化程度低、操作不友好。 dbcd0833877aca2fe91dbcd47d672c/p6_2.jpg) ## 核心功能 API 设计者 后端开发 API 文档 API 调试 比 Swagger、Markdown 更好用 比 Postman 更强大 前端开发 测试人员 API 数据 Mock API 自动化测试 比 Mock.js 更智能 比 JMeter 更高效 ## 更多特性 ![Imag

Istio for Creating API Tests Low Effort API Testing for Microservices ## mesh dynamics ## Structure ## • What has changed? – Migration to microservices triggering need for extensive API tests ## • Problem: Problem: – Creating API tests is effort intensive — Creating + maintainting E2E, service tests, component tests adds up very quickly • What happens if you do not address the problem? — Thorough test coverage • What is our solution? — Leverage Istio sidecar to listen to API traffic data and create tests from the data - 10x speed in creating API tests • Can also be sped up by just navigating the application

## turn('page', 4); API DOCUMENTATION # turn.js 4 $ ^{th} $ release www.turnjs.com ©2012 Emmanuel Garcia – All rights reserved The turn.js API was conveniently built as a jQuery plugin, it it provides access to a set of features and allows you to define the user interaction. The API includes properties, methods and events. Most setter and setter functions have the same name. ## Essentials 2. Adding pages dynamically through the API. The HTML contains only the container and all the pages will be dynamically added after getting the

## +24 ## Hidden Overhead of a Function API ## OLEKSANDR BACHERIKOV ## What we do at Snap with C++  Neural style transfer performance, we typically think about the function logic. We’ll see that a well designed function API can have an even larger impact. ## How will we compare performance? • Benchmarks at this low level then constructs the return value into this address. ... the pointer is passed as if it were the first parameter in the function prototype, preceding all other parameters, including the this and vTT parameters

API 设计、开发、测试 一体化协作平台 用友 yonyou ## 关于 Apifox ## 超百万开发者的选择 ## 130 万+ 开发者用户 Apifox（广州睿狐信息科技有限公司）成立于 2021 年，是一家专注于企业 API 研发管理工具及解决方案的创新企业。围绕 API 全生命周期协同与管理需求，提供 API 文档、API 调试、API Mock、API 自动化测试等核心产品能力，致力于为全球研发团队提高 自动化测试等核心产品能力，致力于为全球研发团队提高 API 开发与协作效率，节省研发团队的每一分钟，助力企业研发效能升级。 |项目名称|负责人|项目范围|预算分配（万元）|实际支出（万元）|差异（万元）|项目状态|负责人|项目预算|实际支出（万元）|差异（万元）|项目状态|负责人|项目预算|实际支出（万元）|差异（万元）|项目状态|负责人|项目预算|实际支出（万元）|差异（万元）|项目状态|负责人|项目预算|实 数字化虽好，但给 API 协同带来挑战不少   DevOps 化 移动化 API 数量

## RUST CHINA CONF 2023 第三届中国Rust开发者大会 6.17-6.18 @Shanghai ## Rustle: the first static analyzer for smart contracts in Rust Matthew Jiang Director of Security Team @ BlockSec Outline 1 Motivation severity in Rustle • Complete documentation and samples is preferred ## Conclusion - Rustle is the first static analyzer for smart contracts in Rust and has been integrated into our workflow - Rustle supports

## Zero instrumentation monitoring with your first steps in eBPF eBPF Summit ## What will we be doing?  ## How are we going uprobes Tracepoints ☐ network packets... • Frameworks. Go bindings. options make it easier: ☐ First approach: C, LLVM/CLANG, tc ☐ Second approach: gobpf, bcc - Non-instrumentation monitoring ![I

# API7 网关技术白皮书 (版本：2022-02) ### 一. 整体介绍 支流科技 API 网关产品（以下简称 API7）是基于 Apache 软件基金会顶级项目 Apache APISIX 构建的，包含了 API 网关、ManagerAPI 与 Dashboard 控制面板 3 个组件。 API 网关作为微服务架构中重要组件，是流量的核心出入口，用于统一处理和业务相关的请求，可有效 c8263abfb38728/p1_1.jpg) 图 1-1 API7 架构图 上图为 API7 产品中控制平面（简称 CP）与数据平面（简称 DP）的架构示意图，并包含了 3 个部分： ### 1. API 网关 用于承载并处理业务流量，管理员在配置路由规则后，网关将根据预设规则将请求转发至上游服务。此外，借助 API7 内置的 50 多种插件，可实现身份验证、安全防护、流量控制、分析监控、请求/响应 转换等常见业务需求；若内置插件无法满足需求，我们也支持使用 Lua、Java、Go、Python 语言自定义插件，可作用于请求进入、上游响应各个阶段。 ### 2. Manager API 用于管理 API 网关，通过访问其暴露的 RESTful API 接口以实现对路由、上游、证书、全局插件、消费者等资源的管理。 ### 3. 控制面板 为了简化网关管理，管理员可以通过 Dashboard 控制面板以可视化形