• cgroup v2 • ... other usual building blocks ... • cgroup-bpf programs ## cgroup-bpf Vast majority of twagent tasks have one or more cgroup-bpf features enabled: • mostly networking: ☐ IP assignment - but not only: - sysctl access control Let's look at some of them ... ## Example of cgroup-bpf programs (bpftool cgroup tree): ![Image](/uploads/documents/1/4/a/7/14a78f1665ead57299ddbea78431f846/p3_1 API call • Action can be applied with probability • Used to test disaster recovery readiness ## cgroup-bpf infra • twagent is written in C++ • libbpf [0] for everything-BPF • BPF integration with buck