{"id":102940,"date":"2022-01-11T15:36:39","date_gmt":"2022-01-11T13:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/bumblebee-%d0%b8%d0%bd%d1%81%d1%82%d1%80%d1%83%d0%bc%d0%b5%d0%bd%d1%82%d0%b0%d1%80%d0%b8%d0%b9-%d0%b4%d0%bb%d1%8f-%d1%83%d0%bf%d1%80%d0%be%d1%89%d0%b5%d0%bd%d0%b8%d1%8f-%d1%81%d0%be%d0%b7%d0%b4"},"modified":"2022-01-11T15:36:39","modified_gmt":"2022-01-11T13:36:39","slug":"bumblebee-%d0%b8%d0%bd%d1%81%d1%82%d1%80%d1%83%d0%bc%d0%b5%d0%bd%d1%82%d0%b0%d1%80%d0%b8%d0%b9-%d0%b4%d0%bb%d1%8f-%d1%83%d0%bf%d1%80%d0%be%d1%89%d0%b5%d0%bd%d0%b8%d1%8f-%d1%81%d0%be%d0%b7%d0%b4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/bumblebee-%d0%b8%d0%bd%d1%81%d1%82%d1%80%d1%83%d0%bc%d0%b5%d0%bd%d1%82%d0%b0%d1%80%d0%b8%d0%b9-%d0%b4%d0%bb%d1%8f-%d1%83%d0%bf%d1%80%d0%be%d1%89%d0%b5%d0%bd%d0%b8%d1%8f-%d1%81%d0%be%d0%b7%d0%b4","title":{"rendered":"BumbleBee \u2014 a toolkit for simplifying the creation and distribution of eBPF programs","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Solo.io, a company developing products for the operation of cloud systems, microservices, isolated containers, and serverless computing, has released the open-source toolkit BumbleBee, designed to simplify the preparation, distribution, and execution of eBPF programs running in a dedicated virtual machine within the Linux kernel, allowing for network operations processing, access control, and system monitoring. The code is written in Go and is distributed under the Apache 2.0 license. <\/p>\n
BumbleBee enables packaging an eBPF program as an OCI (Open Container Initiative) container image, which can be run on any system without recompilation or the need for additional user space components. BumbleBee handles interactions with eBPF code in the kernel, including processing data from incoming eBPF handlers, automatically exporting this data as metrics, histograms, or logs, which can be accessed using utilities like curl. This approach allows developers to focus on writing eBPF code without being distracted by managing interactions with this code from user space, building, and loading into the kernel. <\/p>\n
To manage eBPF programs, there is a Docker-style utility called «bee», which allows you to instantly load the desired eBPF handler from an external repository and run it on your local system. This toolkit enables the generation of a code skeleton in C for eBPF handlers of the selected topic (currently, only network and file operation handlers are supported, intercepting calls to the network stack and file systems). Based on the generated skeleton, a developer can quickly implement the functionality they are interested in. <\/p>\n
Unlike BCC (BPF Compiler Collection), BumbleBee does not perform a full rebuild of the handler code for each version of the Linux kernel (BCC uses just-in-time compilation with Clang on each execution of the eBPF program). To address portability issues, the CO-RE and libbpf toolchains are being developed, allowing the code to be compiled only once and utilizing a special universal loader that adapts the loaded program to the current kernel and BTF (BPF Type Format) types. BumbleBee is a layer on top of libbpf and provides additional types for the automatic interpretation and visualization of data stored in common eBPF map structures, RingBuffer and HashMap. <\/p>\n
To build the final eBPF program and save it as an OCI image, simply execute the command «bee build file_with_code image:version», and to run it, use «bee run image:version». By default, events received from the handler will be output to the terminal window, but if needed, you can retrieve data using curl or wget by targeting the network port associated with the handler. Handlers can be distributed through OCI-compatible repositories; for example, to run an external handler from the ghcr.io (GitHub Container Registry) repository, execute the command «bee run ghcr.io\/solo-io\/bumblebee\/tcpconnect:$(bee version)». To place a handler in a repository, the «bee push» command is suggested, and to tag a version \u2014 use «bee tag». \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"