Enabling eBPF Super Powers on ARM64 with Cilium Jianlin Lv Trevor Tao October 28, 2020 Preface Arm ecosystem of CNI Support Arm64 • Cilium enable on aarch64 • https://github.com/cilium/cilium/issues/9898 ues/9898 • Fix compiling and runtime issue on Arm64; • Multi-arch support for cilium-related images • CI/CD • Travis • Unit test Travis CI • Arm64 Full VM • arm64-graviton2 • Refer to: • https://docs https://github.com/cilium/proxy/runs/1250471418 Demo on Arm64 Future Work • Cilium benchmark on Arm64 • Enable End-To-End Testing Cilium Channel for Arm64 • https://cilium.slack.com/archives/C0125S9TQD8

com/cilium/cilium-cli/main/stable- v0.14.txt) CLI_ARCH=amd64 if [ "$(uname -m)" = "aarch64" ]; then CLI_ARCH=arm64; fi curl -L --fail --remote-name-all https://github.com/cilium/cilium- cli/releases/download/${CI githubusercontent.com/cilium/cilium-cli/main/stable- v0.14.txt) CLI_ARCH=amd64 if [ "$(uname -m)" = "arm64" ]; then CLI_ARCH=arm64; fi curl -L --fail --remote-name-all https://github.com/cilium/cilium- cli/releases/d com/cilium/cilium-cli/main/stable- v0.14.txt) CLI_ARCH=amd64 if [ "$(uname -m)" = "aarch64" ]; then CLI_ARCH=arm64; fi curl -L --fail --remote-name-all https://github.com/cilium/cilium- cli/releases/download/${CI

Performance 3. ProductivityIn Visual Studio 2022 version 17.4, Native ARM64 Toolchain • Develop for ARM64 on ARM64 with no emulation • Includes ARM64 versions of Ninja and CMake • Available with the C++ Desktop Optimizations • Host of new backend improvements • Both machine-independent and ARM64-specific • ARM64 improvements cover both scalar and vector (NEON) instructions Visit https://aka.ms/cpp/back-mi catalog for x86, x64, Arm64, and UWP targets • 50+ unique build targets available by default, including support for Windows, Linux, macOS, iOS, Android, wasm, x86, x64, ARM, and ARM64 • Or add your own custom

硬件要求。 硬件兼容支持请查看 openEuler 兼容性列表：https://openeuler.org/zh/compatibility/。 服务器 部件名称 最小硬件要求 架构 ARM64、x86_64 内存 为了获得更好的体验，建议不小于 4GB 硬盘 为了获得更好的体验，建议不小于 20GB 虚拟机 openEuler 安装时，应注意虚拟机的兼容性问题，当前已测试可以兼容的虚拟机及组件如下所示。 架构 Arm64、x86_64 CPU 2 个 CPU 内存 为了获得更好的体验，建议不小于 4GB 硬盘 为了获得更好的体验，建议不小于 20GB 09 openEuler 24.03 LTS 技术白皮书 运行环境 嵌入式 若需要在嵌入式环境上安装 openEuler 操作系统，则嵌入式硬件需要满足以下兼容性和最小硬件要求。 部件名称 最小硬件要求 架构 Arm64、Arm32 为了获得更好的体验，建议不小于 256MB 边缘设备 若需要在边缘设备环境上安装 openEuler 操作系统，则边缘设备硬件需要满足以下兼容性和最小硬件要求。 部件名称 最小硬件要求 架构 Arm64、x86_64 内存 为了获得更好的体验，建议不小于 4GB 硬盘 为了获得更好的体验，建议不小于 20GB 场景创新 10 openEuler 24.03 LTS 技术白皮书 场景创新

-scan-deps" -format=p1689 -- /Users/hoffman/Work/llvm/llvm-inst/bin/clang++ -std=gnu++20 -arch arm64 -isysroot /Library/Developer/CommandLineTools/SDKs/MacOSX14.4.sdk -x c++ /Users/hoffman/Work/modules/simple/main -scan-deps" -format=p1689 -- /Users/hoffman/Work/llvm/llvm-inst/bin/clang++ -std=gnu++20 -arch arm64 -isysroot /Library/Developer/CommandLineTools/SDKs/MacOSX14.4.sdk -x c++ /Users/hoffman/Work/modules/simple/A -scan-deps" -format=p1689 -- /Users/hoffman/Work/llvm/llvm-inst/bin/clang++ -std=gnu++20 -arch arm64 -isysroot /Library/Developer/CommandLineTools/SDKs/MacOSX14.4.sdk -x c++ /Users/hoffman/Work/modules/simple/B

ARM and ARM64 support (Raspberry Pi, Surface Pro X, Apple Silicon)Visual Studio Code What’s new? 1. GitHub Codespaces (coding from your browser!) 2. CMake Presets support 3. ARM and ARM64 support (Raspberry What’s new? 1. GitHub Codespaces (coding from your browser!) 2. CMake Presets support 3. ARM and ARM64 support (Raspberry Pi, Surface Pro X, Apple Silicon) 4. CUDA IntelliSense and GPU debugging 5. Disassembly What’s new? 1. GitHub Codespaces (coding from your browser!) 2. CMake Presets support 3. ARM and ARM64 support (Raspberry Pi, Surface Pro X, Apple Silicon) 4. CUDA IntelliSense and GPU debugging 5. Disassembly

aarch64/raspi3 ]: 3 ARCH = arm64 4 CPU ?= cortex-a53 5 LINUX ?= v5.1 6 ROOTDEV_LIST := /dev/mmcblk0 /dev/ram0 7 ROOTDEV ?= /dev/mmcblk0 8 [ aarch64/virt ]: 9 ARCH = arm64 10 CPU ?= cortex-a57 11 Currently, such boards have the same name: 1 $ make list FILTER=virt 2 [ aarch64/virt ]: 3 ARCH = arm64 4 CPU ?= cortex-a57 5 LINUX ?= v5.1 6 ROOTDEV_LIST := /dev/sda /dev/vda /dev/ram0 /dev/nfs 7 ROOTDEV not keep up, to reduce the maintaining pressure, external toolchain feature is added. for example, ARM64/virt, CCVER and CCPATH has been added for it. List available prebuilt toolchains: 1 $ make gcc-list

aarch64/raspi3 ]: 3 ARCH = arm64 4 CPU ?= cortex-a53 5 LINUX ?= v5.1 6 ROOTDEV_LIST := /dev/mmcblk0 /dev/ram0 7 ROOTDEV ?= /dev/mmcblk0 8 [ aarch64/virt ]: 9 ARCH = arm64 10 CPU ?= cortex-a57 11 Currently, such boards have the same name: 1 $ make list FILTER=virt 2 [ aarch64/virt ]: 3 ARCH = arm64 4 CPU ?= cortex-a57 5 LINUX ?= v5.1 6 ROOTDEV_LIST := /dev/sda /dev/vda /dev/ram0 /dev/nfs 7 ROOTDEV not keep up, to reduce the maintaining pressure, external toolchain feature is added. for example, ARM64/virt, CCVER and CCPATH has been added for it. List available prebuilt toolchains: 1 $ make gcc-list

aarch64/raspi3 ]: 3 ARCH = arm64 4 CPU ?= cortex-a53 5 LINUX ?= v5.1 6 ROOTDEV_LIST := /dev/mmcblk0 /dev/ram0 7 ROOTDEV ?= /dev/mmcblk0 8 [ aarch64/virt ]: 9 ARCH = arm64 10 CPU ?= cortex-a57 11 Currently, such boards have the same name: 1 $ make list FILTER=virt 2 [ aarch64/virt ]: 3 ARCH = arm64 4 CPU ?= cortex-a57 5 LINUX ?= v5.1 6 ROOTDEV_LIST := /dev/sda /dev/vda /dev/ram0 /dev/nfs 7 ROOTDEV not keep up, to reduce the maintaining pressure, external toolchain feature is added. for example, ARM64/virt, CCVER and CCPATH has been added for it. List available prebuilt toolchains: 1 $ make gcc-list

guides 2 Advanced installation 3 install/netboot-amd64 amd64 netboot install 3 install/netboot-arm64 arm64 netboot install 3 install/netboot-ppc64el ppc64el netboot install 3 install/ppc64el Virtual CDROM email hosting, etc. This version supports four 64-bit architectures: • amd64 (Intel/AMD 64-bit) • arm64 (64-bit ARM) • ppc64el (POWER8 and POWER9) • s390x (IBM Z and LinuxONE) The recommended system requirements partition created on it is selected as a boot device 26 but this can be changed later. On amd64 and arm64 systems, multiple disks can be selected as boot devices, which means a system can be configured so