{"id":32586,"date":"2019-10-31T21:47:51","date_gmt":"2019-10-31T18:47:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp\/"},"modified":"2019-10-31T21:47:51","modified_gmt":"2019-10-31T18:47:51","slug":"kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","title":{"rendered":"La compa\u00f1\u00eda Cloudflare ha publicado xdpcap, un analizador de tr\u00e1fico basado en la subsistema XDP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Empresa Cloudflare ha presentado<\/a><\/noindex> proyecto abierto xdpcap<\/a><\/noindex>, en el marco del cual se desarrolla un analizador de paquetes de red similar a tcpdump, basado en el subsistema XDP<\/a><\/noindex> (eXpress Data Path). El c\u00f3digo del proyecto est\u00e1 escrito en el lenguaje Go y se distribuye<\/a><\/noindex> bajo la licencia BSD. El proyecto tambi\u00e9n ha preparado<\/a><\/noindex> una biblioteca para enlazar controladores de tr\u00e1fico eBPF desde aplicaciones en el lenguaje Go.<\/p>\n

La utilidad xdpcap es compatible con expresiones de filtrado tcpdump\/libpcap y permite procesar vol\u00famenes de tr\u00e1fico mucho mayores en el mismo hardware. Xdpcap tambi\u00e9n puede usarse para depuraci\u00f3n en situaciones donde tcpdump no es aplicable, por ejemplo, cuando se utilizan sistemas de filtrado, protecci\u00f3n contra ataques de DoS y balanceo de carga que emplean el subsistema XDP del n\u00facleo de Linux, que procesa paquetes en la fase anterior a su tratamiento por la pila de red del n\u00facleo de Linux (tcpdump no ve paquetes descartados por el controlador XDP).<\/p>\n

Un alto rendimiento se logra gracias a la utilizaci\u00f3n de los subsistemas eBPF y XDP. eBPF es un int\u00e9rprete de bytecode integrado en el n\u00facleo de Linux que permite crear controladores de paquetes de entrada\/salida de alto rendimiento, tomando decisiones sobre su redirecci\u00f3n o descarte. Con la ayuda de un compilador JIT, el bytecode eBPF se traduce sobre la marcha a instrucciones de m\u00e1quina y se ejecuta con el rendimiento del c\u00f3digo nativo. El subsistema XDP (eXpress Data Path) complementa a eBPF, permitiendo la ejecuci\u00f3n de programas BPF en el nivel del controlador de red, con soporte para acceso directo al b\u00fafer DMA de los paquetes y trabajando en la fase anterior a la asignaci\u00f3n de un b\u00fafer skbuff por la pila de red.<\/p>\n

Al igual que tcpdump, la utilidad xdpcap inicialmente traduce reglas de filtrado de tr\u00e1fico de alto nivel a la representaci\u00f3n cl\u00e1sica BPF (cBPF) utilizando la biblioteca est\u00e1ndar libpcap, y luego las convierte en forma de subtareas eBPF, usando el compilador cbpfc<\/a><\/noindex>, utilizando desarrollos de LLVM\/Clang. La informaci\u00f3n sobre el tr\u00e1fico se guarda en el formato est\u00e1ndar pcap, lo que permite usar el volcado de tr\u00e1fico preparado en xdpcap para su posterior an\u00e1lisis en tcpdump y otros analizadores de tr\u00e1fico existentes. Por ejemplo, para capturar informaci\u00f3n sobre el tr\u00e1fico DNS, en lugar del comando \u00abtcpdump ip and udp port 53\u00bb, se puede ejecutar \u00abxdpcap \/path\/to\/hook capture.pcap 'ip and udp port 53'\u00bb, despu\u00e9s de lo cual se puede usar el archivo capture.pcap, por ejemplo, con el comando \u00abtcpdump -r\u00bb o en Wireshark.<\/p>\n

<\/a><\/noindex><\/p>\n

Fuente: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 xdpcap, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0445\u043e\u0436\u0438\u0439 \u043d\u0430 tcpdump \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP (eXpress Data Path). \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 eBPF-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go. \u0423\u0442\u0438\u043b\u0438\u0442\u0430 xdpcap \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u0430 \u0441 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 tcpdump\/libpcap […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32586","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47La empresa Cloudflare ha publicado xdpcap, un analizador de tr\u00e1fico basado en el subsistema XDP | ProHoster","description":"La empresa Cloudflare ha presentado un proyecto abierto","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 xdpcap, \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:47:51+00:00","article:modified_time":"2019-10-31T18:47:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32586","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 11:37:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:56:29","updated":"2026-01-21 11:37:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/32586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=32586"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/32586\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=32586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=32586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=32586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}