bpftune, uhlelo olusha oluzenzakalelayo lokusebenzisa i-BPF lwe-Linux

Muva nje I-Oracle yembuliwe ngokuthumela isistimu yakho entsha "bpftune" iyiphi yakhelwe ukuthuthukisa ngokuzenzakalelayo ukucushwa kwe-kernel ngokusekelwe emisebenzini eyenziwe, umsebenzi wesistimu, namaphethini okulayisha.

I-bpftune isebenza ngemuva futhi iqapha ukusetshenziswa kwesistimu kanye nesitaki senethiwekhi. Isizathu sokwakhiwa kwephrojekthi isidingo sokuthuthukisa izinhlelo ezizimele eziklanyelwe ukusebenza ngokungenelela okuncane komlawuli, kanye nobunkimbinkimbi obukhulayo be-kernel yesimanje, okwandisa umsebenzi wokwenza izinto ngezandla.

Futhi yilokho i-kernel inikeza amapharamitha angaphezu kuka-1500 ezithinta ukusebenza nokusetshenziswa kwezinsiza, futhi ngokuvamile umlawuli umane akopishe izindlela zokupheka esezilungile, ngaphandle kokuhlolisisa ingqikithi yazo ngokuningiliziwe futhi enethemba lokuthi zizosiza).

I-Bpftune ilungisa ngokuzenzakalelayo futhi ngokuqhubekayo ukucushwa kwe-kernel. Uhlelo lugadwa kusetshenziswa imisebenzi ehambisanayo yesihlungi se-Berkeley Packet (BPF).

I-Linux kernel iqukethe amapharamitha angaphezu kwe-1500 aguqulekayo, futhi ukusetha le mingcele ngendlela efanele kungathuthukisa kakhulu ukusebenza kohlelo nokusetshenziswa! Sekuyiminyaka sizama ukunikeza amacebiso alungile kulawa mapharamitha aguqulekayo, ngamanothi okukhishwa kwesofthiwe nokuzenzakalelayo okuthuthukisiwe, kodwa ukulayisha kwesistimu okuningi kuzozuza ekushumeni okuguquguqukayo kwalawa manani.

Sethula i-bpftune, isihleli esizenzakalelayo esiqapha umthwalo wakho wokusebenza futhi sisethe amanani afanele wepharamitha ye-kernel! I-bpftune iphrojekthi yomthombo ovulekile etholakala kumakhosombe e-Oracle Linux

Mayelana ne-Bpftune

I-Bpftune ihlale iqapha isimo sohlelo, ilungisa ngokuguquguqukayo amapharamitha e-kernel athinta ukusebenza futhi ihlola ukuziphatha okushintshayo ukuze kutholakale imiphumela emihle. Siyabonga ku-BPF, akuzona nje izibalo ezicatshangelwayo yesistimu yonke, kodwa futhi imininingwane yokuziphatha kwezingxenye ngazinye, okuyinto, ngokwesibonelo, ikuvumela ukuthi ulungise izilungiselelo ezingeni lamasokhethi ngamanye kanye namadivayisi.

Ukuqaliswa kwe- ukulungiselelwa ngakunye kudluliselwe kuma-plugin ezilayishwa ngesikhathi sokuqaliswa kwenqubo ngendlela yemitapo yolwazi. I-plugin ngayinye esebenzisa ukulungiselelwa okuthile iqukethe umshayeli we-BPF osebenza ku-kernel kanye nengxenye esebenza endaweni yomsebenzisi.

Izinzuzo eziyinhloko ezinikezayo yilezi:

• Ukuqapha okuqhubekayo nokulungisa ukuziphatha kwesistimu kusetshenziswa izici zokubonwa ze-BPF (Berkeley Packet Filter).
• Ukushuna ukuziphatha kwesistimu ezingeni elihlelwe kahle, kwenziwe nokwenzeka ngoba singabona imininingwane eyengeziwe yesimo sesistimu sisebenzisa i-BPF.

Wonke ama-plugin asebenzisa i-BPF ring buffer evamile yomhlaba wonke ukuze adlulisele imicimbi ye-kernel endaweni yomsebenzisi. Ama-plugin angakhethwa ngokuya ngezidingo zomlawuli futhi zingakhutshazwa ngokuzenzakalela uma umlawuli eshintsha ngokuzenzela ukucushwa kwe-kernel okuhlobene nazo.

Ngesikhathi senqubo yokushuna okuzenzakalelayo, I-bpftune izama ukuzuza ibhalansi efanele phakathi kokunikezwa nokusetshenziswa kwezinsiza, kucatshangelwa umthelela ongaqondile wezinguquko. Isibonelo, ukuze ukhuphule ukusebenza, kufanele ukhuphule usayizi wesigcinalwazi senethiwekhi, kodwa ukusikhulisa kuholela ekusetshenzisweni kwememori okuphezulu kanye nokubambezeleka kokudluliswa kwedatha okude, ngakho le mingcele kufanele icatshangelwe lapho ukhuphula usayizi webhafa. .

Ama-plugin atholakalayo ukuze asetshenziswe afaka:

• bpftune-tcp-cong: ukukhetha okuzenzakalelayo kwe-algorithm yokulawula ukuminyana kwenethiwekhi
• bpftune-neigh: ukukhetha okuzenzakalelayo kosayizi wethebula lekheli le-MAC labasingathi abangomakhelwane
• Umzila we-bpftune: ukukhethwa kosayizi wethebula lomzila ozenzakalelayo.
• bpftune-sysctl - Iqapha izilungiselelo ze-sysctl futhi ikhubaze ishuna ehlobene uma ingqubuzana nezilungiselelo ezenziwa ngesandla.
• I-bpftune-tcp-buffer: ukukhetha okuzenzakalelayo kosayizi bokuqala kanye nomkhawulo wamabhafa we-TCP
• i-bpftune-net-buffer: ukumisa okuzenzakalelayo kwamabhafa enethiwekhi ayisisekelo
• I-bpftune-netns - Ilandelela ukungezwa nokususwa kwezikhala zamagama zenethiwekhi (netspace namespace)

Okokugcina uma unentshisekelo yokwazi kabanzi ngakho, kufanele wazi ukuthi ikhodi yephrojekthi ibhalwe ngolimi C futhi isakazwa ngaphansi kwelayisensi ye-GPLv2 futhi ungabheka imininingwane isixhumanisi esilandelayo.