SUMMIT China 2023 ## Unleashing the Magic: Harnessing eBPF for Traffic Redirection in Istio Ambient Mode Chun Li & Iris Ding, Intel ## Outline • What is ambient mesh • How ambient mesh works • How reinforces ambient mesh • Next(lesson learned)... ## Background • Ambient mesh is a new Istio data plane mode • Launched in Sep. 2022. announcement • Currently in alpha status, moving forward to beta phase 1. Follow the instructions in Getting Started with Ambient Mesh 2. In istio install stage set the mode to ebpf by ' --set values.cni.ambient.redirectMode="ebpf", e.g.: istioctl install --set

Search (Auto) ..... 219 4.2 Command-line options ..... 222 4.3 Compilers ..... 246 4.4 Emacs Mode ..... 250 4.5 Literate Programming ..... 257 4.6 Generating HTML ..... 259 4.7 Generating LaTeX agda and the agda-mode programs After installing the prerequisites you can install the latest released version of Agda from Hackage. Using cabal For installing the agda and the agda-mode programs using console code page to UTF-8 using the command: ## Using stack For installing the agda and the agda-mode programs using stack run the following commands: cabal get Agda-X.Y.Z cd Agda-X.Y.Z stack --stack-yaml

Search (Auto) ..... 141 4.2 Command-line options ..... 144 4.3 Compilers ..... 150 4.4 Emacs Mode ..... 152 4.5 Literate Programming ..... 157 4.6 Generating HTML ..... 159 4.7 Generating LaTeX commands: cabal update cabal install Agda agda-mode setup #### 2.2. Prerequisites The last command tries to set up Emacs for use with Agda via the Emacs mode. As an alternative you can copy the following 'utf-8)) (shell-command-to-string "agda-mode locate"))) It is also possible (but not necessary) to compile the Emacs mode’s files: agda-mode compile This can, in some cases, give a noticeable

'./src/index.html'}) } }; ## 核心概念之 Mode Mode 用来指定当前的构建环境是：production、development 还是 none 设置 mode 可以使用 webpack 内置的函数，默认值为 production ## Mode 的内置函数功能 |选项|描述| |---|---| |development|设置 process

10 Bundle obfuscated scripts with customized spec file 16 3.11 Improving The Security By Restrict Mode 17 3.12 Checking Imported Function Is Obfuscated 18 3.13 Call pyarmor From Python Script 19 Modes of Obfuscated Scripts 67 11.1 Advanced Mode 67 11.2 Obfuscating Code Mode 68 11.3 Wrap Mode 68 11.4 Obfuscating module Mode 69 11.5 Restrict Mode 69 12 The Performance of Obfuscated Scripts number stands for the features: • 0: No anti-debug, JIT, advanced mode features, high speed • 7: Include anti-debug, JIT, advanced mode features, high security It’s possible to obfuscate the scripts with

Package • Packing Obfuscated Scripts • Improving Security Further • Advanced Topics ○ Using Super Mode Obfuscating Many Packages Solve Conflicts With Other Obfuscated Libraries Distributing Obfuscated File ○ Bundle obfuscated scripts with customized spec file ○ Improving The Security By Restrict Mode ☐ Using Plugin To Improve Security. ☐ Call pyarmor From Python Script ☐ Check license periodically of Obfuscated Scripts - Super Mode - Advanced Mode - Obfuscating Code Mode - Wrap Mode - Obfuscating module Mode - Restrict Mode - The Performance of Obfuscated Scripts

Packing Obfuscated Scripts 8 2.8 Improving Security Further 8 3 Advanced Topics 11 3.1 Using Super Mode 11 3.2 How to use outer license file 12 3.3 Obfuscating Many Packages 12 3.4 Solve Conflicts 12 Bundle obfuscated scripts with customized spec file 20 3.13 Improving The Security By Restrict Mode 21 3.14 Using Plugin To Improve Security 22 3.15 Call pyarmor From Python Script 24 3.16 Check How to protect data files ..... 30 3.26 How to remove docstrings ..... 31 3.27 Using restrict mode with threading and multiprocessing ..... 31 4 Examples ..... 33 4.1 Obfuscating and Packing

Proof Search (Auto) ..... 93 4.2 Command-line options ..... 96 4.3 Compilers ..... 99 4.4 Emacs Mode ..... 101 4.5 Literate Programming ..... 105 4.6 Generating HTML ..... 106 4.7 Generating LaTeX testing/unstable and Ubuntu from Karmic onwards. To install: apt-get install agda-mode This should install Agda and the Emacs mode. The standard library is available in Debian testing/unstable and Ubuntu from Agda will pull in emacs-agda-mode and ghc-Agda-devel. ## NixOS Agda is part of the Nixpkgs collection that is used by http://nixos.org/nixos. To install Agda and agda-mode for Emacs, type: nix-env -f

Views and the "with" rule 41 9 Theorem Proving 43 10 Provisional Definitions 48 11 Interactive Editing 52 12 Syntax Extensions 55 13 Miscellany 58 14 Further Reading 66 This is the Idris software. For a more in-depth introduction to Idris, which proceeds at a much slower pace, covering interactive program development, with many more examples, see Type-Driven Development with Idris by Edwin Brady executable called prog. • --check type check the file and its dependencies without starting the interactive environment. --package pkg add package as dependency, e.g. --package contrib to make use of the