## Steering connections to sockets with BPF socket lookup hook Jakub Sitnicki, Cloudflare @jkbs0 @cloudflare eBPF Summit ## Who am I? - Software Engineer at Cloudflare Spectrum TCP/UDP reverse proxy

done.tap('My Plugin', (cdots) { stats /* stats is passed as argument when done hook is tapped. */ )= { console.log('Hello World!'); saveAs(content, "example.zip"); }); ## 复习：Compiler 上负责文件生成的 hooks Hooks 是 emit，是一个异步的 hook (AsyncSeriesHook) emit 生成文件阶段，读取的是 compilation.assets 对象的值 ·可以将 zip 资源包设置到 compilation.assets 对象上

section("tc1ok") int hook1_ok(struct __sk_buff *skb) DBG("hook1_ok handler processed\n"); return TC_ACT_OK; _section("tc2ok") int hook2_ok(struct __sk_buff *skb) DBG("hook2_ok handler processed\n"); section("tc1pipe") int hook1_pipe(struct sk_buff *skb) DBG("hook1_pipe handler processed\n"); return TC_ACT_PIPE; // same effect as TC_ACT_UNSPEC section("tc2pipe") int hook2_pipe(struct __sk_buff __sk_buff *skb) DBG("hook2_pipe handler processed\n"); return TC_ACT_PIPE; // same effect as TC_ACT_UNSPEC ## Hook returns TC_ACT_OK filter protocol all pref 1 bpf chain 0 filter protocol all

currently used to register additional authentication handlers for conda via the Auth Handlers plugin hook, but may also accommodate more use cases in the future. Here is an example of how it may be defined authentication handler called, "test-auth-handler" registered via the aforementioned plugin hook: channel_settings: - channel: https://some.custom/channel auth: test-auth-handler user: my-user-account integrate the "hook + entry point" structure by utilizing the Pluggy Python framework. This implementation can be broken down via the following two steps: • Define the hook(s) to be registered

if the task has not been executed yet # so in most cases you will want to use a hook: async('math.modf', 2.5, hook='hooks.print_result') # hooks.py def print_result(task): print(task print(task.result) async() can take the following optional keyword arguments: ## hook The function to call after the task has been executed. This function gets passed the complete Task object as its argument This enables you to use these keywords for your function call: #Async options in a dict opts = {'hook': 'hooks.print_result', 'group': 'math',

if the task has not been executed yet # so in most cases you will want to use a hook: async('math.modf', 2.5, hook='hooks.print_result') # hooks.py def print_result(task): print(task print(task.result) async() can take the following optional keyword arguments: ## hook The function to call after the task has been executed. This function gets passed the complete Task object as its argument This enables you to use these keywords for your function call: #Async options in a dict opts = {'hook': 'hooks.print_result', 'group': 'math',

for the Apache HTTP Server 2.4 ..... 1016 11.5 Documenting code in Apache 2.4 ..... 1044 11.6 Hook Functions in the Apache HTTP Server 2.x ..... 1045 11.7 Converting Modules from Apache 1.3 to Apache Changes Check Configuration Hook Added A new hook, check_config, has been added which runs between the pre_config and open_logs hooks. It also runs before the test_config hook when the -t option is passed passed to httpd. The check_config hook allows modules to review interdependent configuration directive values and adjust them while messages can still be logged to the console. The user can thus be alerted

Developing modules for the Apache HTTP Server 2.4 1030 11.5 Documenting code in Apache 2.4 1058 11.6 Hook Functions in the Apache HTTP Server 2.x 1059 11.7 Converting Modules from Apache 1.3 to Apache 2 Changes Check Configuration Hook Added A new hook, check_config, has been added which runs between the pre_config and open_logs hooks. It also runs before the test_config hook when the -t option is passed passed to httpd. The check_config hook allows modules to review interdependent configuration directive values and adjust them while messages can still be logged to the console. The user can thus be alerted

currently used to register additional authentication handlers for conda via the Auth Handlers plugin hook, but may also accommodate more use cases in the future. Here is an example of how it may be defined authentication handler called, "test-auth-handler" registered via the aforementioned plugin hook: channel_settings: - channel: https://some.custom/channel auth: test-auth-handler user: my-user-account integrate the "hook + entry point" structure by utilizing the Pluggy Python framework. This implementation can be broken down via the following two steps: • Define the hook(s) to be registered

modules for the Apache HTTP Server 2.4 ..... 938 11.5 Documenting code in Apache 2.4 ..... 966 11.6 Hook Functions in the Apache HTTP Server 2.x ..... 967 11.7 Converting Modules from Apache 1.3 to Apache Changes Check Configuration Hook Added A new hook, check_config, has been added which runs between the pre_config and open_logs hooks. It also runs before the test_config hook when the -t option is passed passed to httpd. The check_config hook allows modules to review interdependent configuration directive values and adjust them while messages can still be logged to the console. The user can thus be alerted