Index
B
- batch mode, loading commands in (BPFTool), Loading Commands in Batch Mode
- BCC (BPF Compiler Collection), Tracing with BPF
- capable tool, Capabilities
- histogram visualizing latency from loading BPF programs, Histograms
- initialization of BPF programs, limitation of, Flame Graphs
- prerequisite for eBPF Exporter installation, Installation
- profiler and visualization tools, Flame Graphs
- Python frontend, using, Kprobes
- sym helper, Flame Graphs
- tplist tool, User Statically Defined Tracepoints
- using with XDP programs, XDP and BCC-XDP and BCC
- BEGIN and END keywords (BPFTrace), Language Reference
- Berkeley Packet Filter (see BPF)
- black swan, Introduction
- BPF, Introduction
- BPF (Berkeley Packet Filter)
- BPF Compiler Collection (see BCC)
- bpf system calls
- BPF Type Format (see BTF)
- BPFTool, BPFTool-Displaying BTF Information
- BPFTrace, BPFTrace-Dynamic Mapping
- bpf_capture_exec function, Perf Events Array Maps
- bpf_dbg.c tool, tcpdump and BPF Expressions
- BPF_F_LOCK flag, Concurrent Access to Map Elements
- BPF_F_USER_STACK flag, Flame Graphs
- bpf_get_current_comm function, Kprobes
- bpf_get_current_pid_tgid function, Uprobes
- BPF_HASH macro, Histograms
- BPF_HISTOGRAM macro, Histograms
- bpf_lpm_trie_key struct, LPM Trie Maps
- bpf_map_create helper function, ELF Conventions to Create BPF Maps
- bpf_map_def struct, The BPF program
- bpf_map_delete_element function, Removing an Element from a BPF Map
- bpf_map_get_next_key function, Iterating Over Elements in a BPF Map
- bpf_map_lookup_and_delete function, Queue Maps
- bpf_map_lookup_and_delete_element function, Looking Up and Deleting Elements
- bpf_map_lookup_elem helper function, Reading Elements from a BPF Map, Hash-Table Maps, The BPF program
- bpf_map_lookup_elem_flags function, Concurrent Access to Map Elements
- BPF_MAP_TYPE_ARRAY, The BPF program
- BPF_MAP_TYPE_ARRAY_OF_MAPS type, Array of Maps and Hash of Maps
- BPF_MAP_TYPE_CGROUP_STORAGE type, Cgroup Storage and Per-CPU Storage Maps
- BPF_MAP_TYPE_CPUMAP type, CPU Map Maps
- BPF_MAP_TYPE_DEVMAP type, Device Map Maps
- BPF_MAP_TYPE_HASH type, Hash-Table Maps
- BPF_MAP_TYPE_HASH_OF_MAPS type, Array of Maps and Hash of Maps
- BPF_MAP_TYPE_LPM_TRIE type, LPM Trie Maps
- BPF_MAP_TYPE_LRU_HASH type, LRU Hash and Per-CPU Hash Maps
- BPF_MAP_TYPE_LRU_PERCPU_HASH type, LRU Hash and Per-CPU Hash Maps
- BPF_MAP_TYPE_PERCPU_ARRAY type, Per-CPU Array Maps, XDP and BCC
- BPF_MAP_TYPE_PERCPU_CGROUP_ STORAGE type, Cgroup Storage and Per-CPU Storage Maps
- BPF_MAP_TYPE_PERCPU_HASH type, Per-CPU Hash Maps
- BPF_MAP_TYPE_PERF_EVENT_ARRAY type, Perf Events Array Maps
- BPF_MAP_TYPE_PROG_ARRAY type, Program Array Maps
- BPF_MAP_TYPE_QUEUE type, Queue Maps
- BPF_MAP_TYPE_REUSEPORT_SOCKARRAY type, Reuseport Socket Maps
- BPF_MAP_TYPE_SOCKHASH type, Socket Array and Hash Maps
- BPF_MAP_TYPE_SOCKMAP type, Socket Array and Hash Maps
- BPF_MAP_TYPE_STACK type, Stack Maps
- BPF_MAP_TYPE_STACK_TRACE type, Stack Trace Maps, Flame Graphs
- BPF_MAP_TYPE_XSKMAP type, Open Socket Maps
- bpf_map_update_elem function, Updating Elements in a BPF Map, The BPF program
- BPF_OBJ_GET command, The BPF Virtual Filesystem
- BPF_PERF_OUTPUT macro, Perf Events
- BPF_PIN_FD command, The BPF Virtual Filesystem
- BPF_PROG_TEST_RUN command, Testing XDP Programs
- BPF_PROG_TYPE_SOCKET_FILTER type, BPF and Packet Filtering, Packet Filtering for Raw Sockets-Load and attach to a network interface
- BPF_PROG_TYPE_XDP, XDP and BCC
- bpf_redirect_map function, Device Map Maps
- bpf_spin_lock function, Concurrent Access to Map Elements
- bpf_spin_unlock function, Concurrent Access to Map Elements
- BPF_STACK_TRACE macro, Flame Graphs
- BPF_STMT and BPF_JUMP macros, Seccomp BPF Filter Example
- BPF_TABLE macro, XDP and BCC
- bpf_tail_call function, Program Array Maps
- bpf_trace_printk function, Kretprobes
- BTF (BPF Type Format), BPF Type Format
- btf subcommand (bpftool), Displaying BTF Information
- busy polling mode (XDP), The Packet Processor
C
- C language
- capabilities, Capabilities-Capabilities
- capsh (capability shell wrapper), Capabilities
- cap_capable function, Capabilities
- CAP_NET_ADMIN capability, Capabilities
- cBPF (classic BPF), BPF and Packet Filtering, Seccomp BPF Filter Example
- cgroup array maps, Cgroup Array Maps
- cgroup device programs, Cgroup Device Programs
- cgroup open socket programs, Cgroup Open Socket Programs
- cgroup socket address programs, Cgroup Socket Address Programs
- cgroup socket programs, Cgroup Socket Programs
- cgroup storage maps, Cgroup Storage and Per-CPU Storage Maps
- cgroups, Introduction
- chaining nested calls, limits on, Program Array Maps
- clang utility, Writing BPF Programs
- classes in classful qdiscs, Classful qdiscs, filters, and classes
- classless qdiscs, Classless qdiscs
- cls_bpf, BPF-Based Traffic Control Classifier
- code error (XDP_ABORTED), XDP result codes (packet processor actions)
- collect_stack_traces function, Flame Graphs
- commands
- compilation
- compilers
- CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER, Seccomp BPF Filter Example
- containers, Introduction
- context (ctx) argument, Kretprobes
- cpu map maps, CPU Map Maps
- CPUs
- curl utility
H
- Hamel, Dale, USDTs bindings for other languages
- hardware offload, Offloaded XDP
- hash of maps, Array of Maps and Hash of Maps
- hash-table maps, Creating BPF Maps, Hash-Table Maps
- headers (BPFTrace), Language Reference
- helper functions in BPFTrace, Language Reference
- histograms, Histograms-Histograms
- HTTP servers, Traffic Control Classifier Program Using cls_bpf
K
- kernel, Introduction
- kernel probes, Kernel Probes-Kretprobes
- kernel security, capabilities, and Seccomp, Linux Kernel Security, Capabilities, and Seccomp-Conclusion
- kill command
- kprobe programs, Kprobe Programs, Histograms
- kubectl-trace, kubectl-trace-Inspecting Kubernetes Nodes
L
- libbpf, Load and attach to a network interface
- libcap (Packet Capture Library), Capabilities
- libpcap (Packet Capture Library), BPF and Packet Filtering
- licenses, GPL, Writing BPF Programs
- lightweight tunnel programs, Other BPF Programs
- Linux Security Modules (LSM) framework, Linux Kernel Security, Capabilities, and Seccomp
- linux/bpf.h file, XDP packet processor action codes, XDP result codes (packet processor actions)
- LLVM compiler, Writing BPF Programs
- load balancing with XDP, Load Balancing
- loader programs, Load and attach to a network interface
- load_bpf_file function, The BPF program
- locks
- logs, Introduction
- loopback interface, attaching BPF program to, Load and attach to a network interface
- LPM (longest prefix match) trie maps, LPM Trie Maps
- LRU (least recently used) hash and per-cpu hash maps, LRU Hash and Per-CPU Hash Maps
- LSM (Linux Security Modules) framework, Linux Kernel Security, Capabilities, and Seccomp
M
- maps (BPF), BPF’s History, BPF Maps-Conclusion
- creating, Creating BPF Maps-ELF Conventions to Create BPF Maps
- dynamic mapping in BPFTrace, Dynamic Mapping
- holding, The BPF program
- holding key/value pair of form <protocol, count of packets>, The BPF program
- inspecting with BPFTool, Inspecting BPF Maps-Inspecting BPF Maps
- iterating over elements, Iterating Over Elements in a BPF Map-Iterating Over Elements in a BPF Map
- per-cpu array map, XDP and BCC
- Perf events array map, Perf Events
- persisting in BPF virtual filesystem, The BPF Virtual Filesystem-The BPF Virtual Filesystem
- stack trace map, Flame Graphs
- types of, Types of BPF Maps-Stack Maps
- array maps, Array Maps
- array of maps and hash of maps, Array of Maps and Hash of Maps
- cgroup array map, Cgroup Array Maps
- cgroup storage and per-cpu cgroup storage maps, Cgroup Storage and Per-CPU Storage Maps
- cpu map maps, CPU Map Maps
- device map maps, Device Map Maps
- hash-table maps, Hash-Table Maps
- LPM trie map, LPM Trie Maps
- open socket maps, Open Socket Maps
- per-cpu array map, Per-CPU Array Maps
- per-cpu hash map, Per-CPU Hash Maps
- Perf events array map, Perf Events Array Maps
- program array maps, Program Array Maps
- queue maps, Queue Maps
- reuseport socket maps, Reuseport Socket Maps
- socket array and hash maps, Socket Array and Hash Maps
- stack maps, Stack Maps
- stack trace map, Stack Trace Maps
- working with, Working with BFP Maps-Concurrent Access to Map Elements
- message delivery programs (socket), Socket Message Delivery Programs
- metrics, Introduction
- monitoring with XDP, Monitoring
- mount command, mounting BPF virtual filesystem, The BPF Virtual Filesystem
N
- namespaces, Introduction
- native XDP, Native XDP
- netstat utility, XDP and iproute2 as a Loader
- network interfaces
- network packets, inspecting programs attached to using BPFTool, Inspecting Programs Attached to Specific Interfaces
- networking (Linux) and BPF, Linux Networking and BPF-Conclusion
- nm command, Uprobes
- nmap utility
- nodes (Kubernetes), running BPF program on, Inspecting Kubernetes Nodes
- noqueue qdisc, Queueing disciplines
- normal receive, XDP result codes (packet processor actions)
P
- Packet Capture Library (libpcap), BPF and Packet Filtering
- packet filtering, BPF and Packet Filtering-Load and attach to a network interface
- packet processing with XDP, Express Data Path
- packet processor (XDP), The Packet Processor-XDP result codes (packet processor actions)
- passing packets (XDP_PASS), XDP result codes (packet processor actions)
- paths
- pcap format, BPF and Packet Filtering
- per-cpu array maps, Per-CPU Array Maps, XDP and BCC
- per-cpu cgroup storage maps, Cgroup Storage and Per-CPU Storage Maps
- per-cpu hash maps, Per-CPU Hash Maps
- Perf event programs, Perf Event Programs
- Perf events
- Perf events array maps, Perf Events Array Maps, Perf Events
- pfifo_fast qdisc, Queueing disciplines
- pgrep utility, USDTs bindings for other languages, Flame Graphs
- physical interfaces, distinguishing from virtual interfaces, Queueing disciplines
- ping, running to generate ICMP traffic to localhost, Load and attach to a network interface
- prctl system call, Seccomp Errors, Seccomp BPF Filter Example
- probes, Tracing with BPF-USDTs bindings for other languages
- process identifiers (PIDs)
- profiler (BPF) for stack traces from user-space applications
- program array maps, Program Array Maps
- programs (BPF)
- Prometheus, exporting BPF tracing metrics to, eBPF Exporter, Exporting Metrics from BPF
- PR_SET_NO_NEW_PRIVS, Seccomp BPF Filter Example
- PR_SET_SECCOMP operation, Seccomp, Seccomp BPF Filter Example
- ptrace system call, Seccomp
- PT_REGS_RC macro, Kretprobes
- Python
R
- race conditions, avoiding in concurrent access to map elements, Concurrent Access to Map Elements
- raw tracepoint programs, Raw Tracepoint Programs
- readelf utility, User Statically Defined Tracepoints
- receive (RX) queues, The Packet Processor
- redirecting packets (XDP_REDIRECT), XDP result codes (packet processor actions)
- resource management
- return codes (Traffic Control), Traffic Control Classifier Program Using cls_bpf
- reuseport socket maps, Reuseport Socket Maps
- Ruby, USDT bindings for, USDTs bindings for other languages
S
- scapy library (Python), XDP Testing Using the Python Unit Testing Framework
- SEC("socket") as ELF header, The BPF program
- Seccomp, Seccomp-Seccomp BPF Filter Example
- seccomp_data struct, Seccomp
- section attribute, ELF Conventions to Create BPF Maps
- security, Linux Kernel Security, Capabilities, and Seccomp
- (see also kernel security, capabilities, and Seccomp)
- SKB (see Socket Buffer structure)
- sk_buff (see Socket Buffer structure)
- socket array maps, Socket Array and Hash Maps
- Socket Buffer structure, Linux Networking and BPF
- socket filter programs, Socket Filter Programs
- socket hash maps, Socket Array and Hash Maps
- socket map prograams, Socket Map Programs
- socket message delivery programs, Socket Message Delivery Programs
- socket option programs, Socket Option Programs
- socket reuseport prograams, Socket Reuseport Programs
- socket statistics (ss command-line utility), XDP and iproute2 as a Loader
- sockets
- spin locks, Concurrent Access to Map Elements
- ss (socket statistics) command-line utility, XDP and iproute2 as a Loader
- stack maps, Stack Maps
- stack trace maps, Stack Trace Maps, Flame Graphs
- strace, Seccomp BPF Filter Example
- strerror function, Updating Elements in a BPF Map
- structured data
- sudo command
- sym helper function, Flame Graphs
- __sync_fetch_and_add function, Array Maps
- /sys pseudo filesystem, Queueing disciplines
- /sys/fs/bpf_ directory, The BPF Virtual Filesystem
- /sys/fs/bpf/shared/ips_ directory, The BPF Virtual Filesystem
- /sys/kernel/debug/tracing/events_ directory, Tracepoints
- Sysdig eBPF God mode, Sysdig eBPF God Mode-Sysdig eBPF God Mode
- system calls, data on, Sysdig eBPF God Mode
T
- tail calls, BPF Tail Calls
- Taleb, Nassim Nicholas, Introduction
- TC (see Traffic Control, BPF-based classifier)
- tc tool
- tcpdump and BPF expressions, tcpdump and BPF Expressions-tcpdump and BPF Expressions
- tools (BPF), BPF Utilities
- tplist tool, User Statically Defined Tracepoints
- tracepoint programs, Tracepoint Programs
- tracepoints, Writing BPF Programs, Tracepoints-Tracepoints
- TRACEPOINT_PROBE macro, Exporting Metrics from BPF
- trace_xdp_exception tracepoint, XDP result codes (packet processor actions)
- tracing
- implemeting on a process using ptrace, Seccomp
- tracing with BPF, Tracing with BPF-Conclusion
- traffic classifier programs, Other BPF Programs
- Traffic Control, BPF-based classifier, BPF-Based Traffic Control Classifier-Differences Between Traffic Control and XDP
- tunnels, lightweight tunnel programs, Other BPF Programs
..................Content has been hidden....................
You can't read the all page of ebook, please click
here login for view all page.