Klienditugi: 7440010 (E-R 10-18)

Abi | Registreeri | Logi sisse

E-raamat: Linux Observability with BPF: Advanced Programming for Performance Analysis and Networking

4.03/5 (64 hinnangut Goodreads-ist)

Lorenzo Fontana, David Calavera

Formaat: 180 pages
Ilmumisaeg: 14-Nov-2019
Kirjastus: O'Reilly Media
Keel: eng
ISBN-13: 9781492050155

Teised raamatud teemal:

Formaat - EPUB+DRM
Hind: 40,37 €*
* hind on lõplik, st. muud allahindlused enam ei rakendu
Lisa ostukorvi
Lisa soovinimekirja
See e-raamat on mõeldud ainult isiklikuks kasutamiseks. E-raamatuid ei saa tagastada.

Formaat: 180 pages
Ilmumisaeg: 14-Nov-2019
Kirjastus: O'Reilly Media
Keel: eng
ISBN-13: 9781492050155

Teised raamatud teemal:

DRM piirangud

Kopeerimine (copy/paste):

ei ole lubatud
Printimine:

ei ole lubatud
Kasutamine:

Digitaalõiguste kaitse (DRM)
Kirjastus on väljastanud selle e-raamatu krüpteeritud kujul, mis tähendab, et selle lugemiseks peate installeerima spetsiaalse tarkvara. Samuti peate looma endale Adobe ID Rohkem infot siin. E-raamatut saab lugeda 1 kasutaja ning alla laadida kuni 6'de seadmesse (kõik autoriseeritud sama Adobe ID-ga).

Vajalik tarkvara
Mobiilsetes seadmetes (telefon või tahvelarvuti) lugemiseks peate installeerima selle tasuta rakenduse: PocketBook Reader (iOS / Android)

PC või Mac seadmes lugemiseks peate installima Adobe Digital Editionsi (Seeon tasuta rakendus spetsiaalselt e-raamatute lugemiseks. Seda ei tohi segamini ajada Adober Reader'iga, mis tõenäoliselt on juba teie arvutisse installeeritud )

Seda e-raamatut ei saa lugeda Amazon Kindle's.

Build your expertise in the BPF virtual machine in the Linux kernel with this practical guide for systems engineers. Youll not only dive into the BPF program lifecycle but also learn to write applications that observe and modify the kernels behavior; inject code to monitor, trace, and securely observe events in the kernel; and more.

Authors David Calavera and Lorenzo Fontana help you harness the power of BPF to make any computing system more observable. Familiarize yourself with the essential concepts youll use on a day-to-day basis and augment your knowledge about performance optimization, networking, and security. Then see how it all comes together with code examples in C, Go, and Python.

Write applications that use BPF to observe and modify the Linux kernels behavior on demand Inject code to monitor, trace, and observe events in the kernel in a secure wayno need to recompile the kernel or reboot the system Explore code examples in C, Go, and Python Gain a more thorough understanding of the BPF program lifecycle

Foreword

vii

Preface

1 Introduction

(6)

BPF's History

(1)

Architecture

(1)

Conclusion

(2)

2 Running Your First BPF Programs

(14)

Writing BPF Programs

(2)

BPF Program Types

(7)

Socket Filter Programs

(1)

Kprobe Programs

(1)

Tracepoint Programs

(1)

XDP Programs

(1)

Perf Event Programs

(1)

Cgroup Socket Programs

(1)

Cgroup Open Socket Programs

(1)

Socket Option Programs

(1)

Socket Map Programs

(1)

Cgroup Device Programs

(1)

Socket Message Delivery Programs

(1)

Raw Tracepoint Programs

(1)

Cgroup Socket Address Programs

(1)

Socket Reuseport Programs

(1)

Flow Dissection Programs

(1)

Other BPF Programs

(1)

The BPF Verifier

(2)

BPF Type Format

(1)

BPF Tail Calls

(1)

Conclusion

(1)

3 BPF Maps

(26)

Creating BPF Maps

(2)

ELF Conventions to Create BPF Maps

(1)

Working with BFP Maps

(10)

Updating Elements in a BPF Map

(2)

Reading Elements from a BPF Map

(1)

Removing an Element from a BPF Map

(1)

Iterating Over Elements in a BPF Map

(2)

Looking Up and Deleting Elements

(1)

Concurrent Access to Map Elements

(2)

Types of BPF Maps

(10)

Hash-Table Maps

(1)

Array Maps

(1)

Program Array Maps

(2)

Perf Events Array Maps

(1)

Per-CPU Hash Maps

(1)

Per-CPU Array Maps

(1)

Stack Trace Maps

(1)

Cgroup Array Maps

(1)

LRU Hash and Per-CPU Hash Maps

(1)

LPM Trie Maps

(1)

Array of Maps and Hash of Maps

(1)

Device Map Maps

(1)

CPU Map Maps

(1)

Open Socket Maps

(1)

Socket Array and Hash Maps

(1)

Cgroup Storage and Per-CPU Storage Maps

(1)

Reuseport Socket Maps

(1)

Queue Maps

(1)

Stack Maps

(1)

The BPF Virtual Filesystem

(3)

Conclusion

(1)

4 Tracing with BPF

(26)

Probes

(13)

Kernel Probes

(2)

Tracepoints

(2)

User-Space Probes

(3)

User Statically Defined Tracepoints

(5)

Visualizing Tracing Data

(10)

Flame Graphs

(6)

Histograms

(2)

Perf Events

(2)

Conclusion

(2)

5 BPF Utilities

(18)

BPFTool

(10)

Installation

(1)

Feature Display

(1)

Inspecting BPF Programs

(3)

Inspecting BPF Maps

(2)

Inspecting Programs Attached to Specific Interfaces

(1)

Loading Commands in Batch Mode

(1)

Displaying BTF Information

(1)

BPFTrace

(3)

Installation

(1)

Language Reference

(2)

Filtering

(1)

Dynamic Mapping

(1)

Kubectl-trace

(2)

Installation

(1)

Inspecting Kubernetes Nodes

(1)

eBPF Exporter

(2)

Installation

(1)

Exporting Metrics from BPF

(2)

Conclusion

(1)

6 Linux Networking and BPF

(22)

BPF and Packet Filtering

(11)

Tcpdump and BPF Expressions

(5)

Packet Filtering for Raw Sockets

(6)

BPF-Based Traffic Control Classifier

103

(9)

Terminology

103

(3)

Traffic Control Classifier Program Using cls_bpf

106

(6)

Differences Between Traffic Control and XDP

112

(1)

Conclusion

112

(1)

7 Express Data Path

113

(22)

XDP Programs Overview

114

(10)

Operation Modes

114

(2)

The Packet Processor

116

(3)

XDP and iproute2 as a Loader

119

(5)

XDP and BCC

124

(3)

Testing XDP Programs

127

(6)

XDP Testing Using the Python Unit Testing Framework

128

(5)

XDP Use Cases

133

(1)

Monitoring

133

(1)

DDoS Mitigation

133

(1)

Load Balancing

133

(1)

Firewalling

134

(1)

Conclusion

134

(1)

8 Linux Kernel Security, Capabilities, and Seccomp

135

(14)

Capabilities

135

(4)

Seccomp

139

(7)

Seccomp Errors

140

(2)

Seccomp BPF Filter Example

142

(4)

BPF LSM Hooks

146

(1)

Conclusion

147

(2)

9 Real-World Use Cases

149

(6)

Sysdig eBPF God Mode

149

(3)

Flowmill

152

(3)

Index

155

David Calavera works as CTO at Netlify. He's served as the maintainer of Docker and contributor to Runc, Go, and BCC tools as well as other open source projects. He's known for his work on the Docker projects, building and fostering the Docker plugin ecosystem. David has a strong fondness for flame graphs and performance optimizations.

Lorenzo Fontana is on the Open Source Team at Sysdig where he primarily works on Falco, a Cloud Native Computing Foundation project that does container runtime security and anomaly detection through a kernel module and eBPF. He's passionate about distributed systems, software-defined networking, the Linux kernel, and performance analysis.

Lisainfo e-raamatute kohta