Steering connections to sockets with BPF socket lookup hook Jakub Sitnicki, Cloudflare @jkbs0 @cloudflare October 28-29, 2020 Who am I? ● Software Engineer at Cloudflare Spectrum TCP/UDP reverse proxy

������������� �������� ThinkJS �� Hook � Middleware �������������������� ThinkJS ������������������������������� ���� WebSocket � ������� ������������� Hook � Middleware ����� HTTP ���� [2015-10-12 | | | | |-- development.js | | | | `-- production.js | | | |-- hook.js | | | |-- locale | | | | |-- en.js | | | | `-- zh-CN.js ��������������������� ���������� replace_image ����������� hook.js ������������ � �bootstrap ���� common ���� ���������������� ��������hook ���������������� src/common src/common/bootstrap ������

code in Apache 2.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 966 11.6 Hook Functions in the Apache HTTP Server 2.x . . . . . . . . . . . . . . . . . . . . . . . . . . . 967 Changes Check Configuration Hook Added A new hook, check config, has been added which runs between the pre config and open logs hooks. It also runs before the test config hook when the -t option is passed passed to httpd. The check config hook allows modules to review interdependent configuration direc- tive values and adjust them while messages can still be logged to the console. The user can thus be alerted

code in Apache 2.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 966 11.6 Hook Functions in the Apache HTTP Server 2.x . . . . . . . . . . . . . . . . . . . . . . . . . . . 967 Changes Check Configuration Hook Added A new hook, check config, has been added which runs between the pre config and open logs hooks. It also runs before the test config hook when the -t option is passed passed to httpd. The check config hook allows modules to review interdependent configuration direc- tive values and adjust them while messages can still be logged to the console. The user can thus be alerted

Changes Check Configuration Hook Added A new hook, check_config, has been added which runs between the pre_config and open_logs hooks. It also runs before the test_config hook when the -t option is passed passed to httpd. The check_config hook allows modules to review interdependent configuration directive values and adjust them while messages can still be logged to the console. The user can thus be alerted alerted to misconfiguration problems before the core open_logs hook function redirects console output to the error log. Expression Parser Added We now have a general-purpose expression parser, whose API is

Changes Check Configuration Hook Added A new hook, check_config, has been added which runs between the pre_config and open_logs hooks. It also runs before the test_config hook when the -t option is passed passed to httpd. The check_config hook allows modules to review interdependent configuration directive values and adjust them while messages can still be logged to the console. The user can thus be alerted alerted to misconfiguration problems before the core open_logs hook function redirects console output to the error log. Expression Parser Added We now have a general-purpose expression parser, whose API is

Changes Check Configuration Hook Added A new hook, check_config, has been added which runs between the pre_config and open_logs hooks. It also runs before the test_config hook when the -t option is passed passed to httpd. The check_config hook allows modules to review interdependent configuration directive values and adjust them while messages can still be logged to the console. The user can thus be alerted alerted to misconfiguration problems before the core open_logs hook function redirects console output to the error log. Expression Parser Added We now have a general-purpose expression parser, whose API is

currently used to register additional authentication handlers for conda via the Auth Handlers plugin hook, but may also accom- modate more use cases in the future. Here is an example of how it may be defined available authentication handler called, "test-auth- handler" registered via the aforementioned plugin hook: channel_settings: - channel: https://some.custom/channel auth: test-auth-handler user: my-user-account conda integrate the "hook + entry point" structure by utilizing the Pluggy Python framework. This imple- mentation can be broken down via the following two steps: • Define the hook(s) to be registered

currently used to register additional authentication handlers for conda via the Auth Handlers plugin hook, but may also accom- modate more use cases in the future. Here is an example of how it may be defined available authentication handler called, "test-auth- handler" registered via the aforementioned plugin hook: channel_settings: - channel: https://some.custom/channel auth: test-auth-handler user: my-user-account conda integrate the "hook + entry point" structure by utilizing the Pluggy Python framework. This imple- mentation can be broken down via the following two steps: • Define the hook(s) to be registered

Changes Check Configuration Hook Added A new hook, check_config, has been added which runs between the pre_config and open_logs hooks. It also runs before the test_config hook when the -t option is passed passed to httpd. The check_config hook allows modules to review interdependent configuration directive values and adjust them while messages can still be logged to the console. The user can thus be alerted alerted to misconfiguration problems before the core open_logs hook function redirects console output to the error log. Expression Parser Added We now have a general-purpose expression parser, whose API is