## Enabling eBPF Super Powers on ARM64 with Cilium Jianlin Lv eBPF Summit finleap ## Preface  ![Image](/uploads/docu

SUMMIT China 2023 ## Unleashing the Magic: Harnessing eBPF for Traffic Redirection in Istio Ambient Mode Chun Li & Iris Ding, Intel ## Outline • What is ambient mesh • How ambient mesh works • How reinforces ambient mesh • Next(lesson learned)... ## Background • Ambient mesh is a new Istio data plane mode • Launched in Sep. 2022. announcement • Currently in alpha status, moving forward to beta phase 1. Follow the instructions in Getting Started with Ambient Mesh 2. In istio install stage set the mode to ebpf by ' --set values.cni.ambient.redirectMode="ebpf", e.g.: istioctl install --set

Package • Packing Obfuscated Scripts • Improving Security Further • Advanced Topics ○ Using Super Mode Obfuscating Many Packages Solve Conflicts With Other Obfuscated Libraries Distributing Obfuscated File ○ Bundle obfuscated scripts with customized spec file ○ Improving The Security By Restrict Mode ☐ Using Plugin To Improve Security. ☐ Call pyarmor From Python Script ☐ Check license periodically Modes of Obfuscated Scripts - Super Mode - Advanced Mode - Obfuscating Code Mode - Wrap Mode - Obfuscating module Mode - Restrict Mode - The Performance of Obfuscated

'./src/index.html'}) } }; ## 核心概念之 Mode Mode 用来指定当前的构建环境是：production、development 还是 none 设置 mode 可以使用 webpack 内置的函数，默认值为 production ## Mode 的内置函数功能 |选项|描述| |---|---| |development|设置 process

包、继承、访问控制、方法重写的概念、机制和 十 凑 性 朋 方法 竣 Java 关键字 super 和关键字 this 大纲 包 继承 访问控制 方法重写 关键字 super 关键字 this 大纲 包 继承 访问控制 方法重写 关键字 super 关键字 this 大纲 包 包 继承 访问 接下来… 方法重写 关键字 super 关键字 this 为便于管理大型软件系统中数目众多的类，解决类的命名冲突问 题以及进行访问控制，Java 引入包 (package) 机制，即将若干功 能相关的类逻辑上分组打包到一起，提供类的多重类命名空间。 System 语言程序设计的基础类 创建图形用户界面和绘制图形图像 的相关类 集合、上日期、国际化、各种实用工具 可提供数据输入/输出相关功能的类 Java 网络编程的相关功能 提供数据库操作的相关功能类 字 super 关键字 thi 包的含义 language 的简写 抽象窗口工具集 utility 的简写 input/outpnut 的简写 网络 结构化查询语言的简 写 包 包的创建 package

10 Bundle obfuscated scripts with customized spec file 16 3.11 Improving The Security By Restrict Mode 17 3.12 Checking Imported Function Is Obfuscated 18 3.13 Call pyarmor From Python Script 19 Modes of Obfuscated Scripts 67 11.1 Advanced Mode 67 11.2 Obfuscating Code Mode 68 11.3 Wrap Mode 68 11.4 Obfuscating module Mode 69 11.5 Restrict Mode 69 12 The Performance of Obfuscated Scripts number stands for the features: • 0: No anti-debug, JIT, advanced mode features, high speed • 7: Include anti-debug, JIT, advanced mode features, high security It’s possible to obfuscate the scripts with

Packing Obfuscated Scripts 8 2.8 Improving Security Further 8 3 Advanced Topics 11 3.1 Using Super Mode 11 3.2 How to use outer license file 12 3.3 Obfuscating Many Packages 12 3.4 Solve Conflicts 12 Bundle obfuscated scripts with customized spec file 20 3.13 Improving The Security By Restrict Mode 21 3.14 Using Plugin To Improve Security 22 3.15 Call pyarmor From Python Script 24 3.16 Check How to protect data files ..... 30 3.26 How to remove docstrings ..... 31 3.27 Using restrict mode with threading and multiprocessing ..... 31 4 Examples ..... 33 4.1 Obfuscating and Packing

Proof Search (Auto) ..... 93 4.2 Command-line options ..... 96 4.3 Compilers ..... 99 4.4 Emacs Mode ..... 101 4.5 Literate Programming ..... 105 4.6 Generating HTML ..... 106 4.7 Generating LaTeX testing/unstable and Ubuntu from Karmic onwards. To install: apt-get install agda-mode This should install Agda and the Emacs mode. The standard library is available in Debian testing/unstable and Ubuntu from Agda will pull in emacs-agda-mode and ghc-Agda-devel. ## NixOS Agda is part of the Nixpkgs collection that is used by http://nixos.org/nixos. To install Agda and agda-mode for Emacs, type: nix-env -f

tokens print axioms : display assumed axioms print options : display options set by user or emacs mode print prefix : display all declarations in the namespace print coercions : display all simplifier subst : substitution lemma, used for calc-expressions and simplifier ## Proof Elements ## Term Mode take, assume : syntactic sugar for lambda let : introduce local definitions have : introduce auxiliary name. ## Tactic Mode At any point in a proof or definition you can switch to tactic mode and apply tactics to finish that part of the proof or definition. begin ... end : enter tactic mode, and blocking