Knowledge ## Prog type • ebpf provide various programs type for different purpose - We choose SOCK_OPS & SK_SKB to implement function enum bpf_prog_type { BPF_PROG_TYPE_UNSPEC, BPF_PR ents/5/a/b/b/5abb1b8f1b8f9d74adba9f84c56cea7a/p7_1.jpg) ## Work Flow of Acceleration - Attach SOCK_OPS program to global cgroup - Capture socket in established state and add to hashmap • Attach sk_skb

e/c/3/aec342d6ecde2328597e69e7306fcad4/p6_1.jpg) ## ebpf Background Knowledge ## Prog type • SOCK_OPS Set callbacks for TCP state changing ➢ Help functions: BPF_MAP_UPDATE_ELEM, BPF_SOCK_HASH_UPDATE ➢ Help functions: BPF_MSG_REDIRECT_HASH Istio Meetup China ## Work Flow of Acceleration ## • sock_ops ○ Capture socket in specific states and populate the maps ## • sk_msg ☐ When socket send a msg

machine Running user code in kernel space safety O Tracing, security ☐ Networking ## ☑ Hooks ## O sock_ops ■ Construct map O sk_msg_md ☑ Match & redirect ## ☑ ~5% improvements Business A Client

☐ Add SO DETACH REUSEPORT BPF to detach BPF prog from reuseport sk commit C, commit C ☐ Add a sock_ops callback that can be selectively enabled on a socket by socket basis and is executed for every RTT