{"id":113049,"date":"2024-01-22T17:28:02","date_gmt":"2024-01-22T15:28:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya"},"modified":"2024-01-22T17:28:02","modified_gmt":"2024-01-22T15:28:04","slug":"proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","title":{"rendered":"Projekt bpftime arendab eBPF-i rakendust, mis t\u00f6\u00f6tab kasutajaruumi.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Esitletakse bpftime projekti, mis arendab runtime'i ja virtuaalmasinat eBPF t\u00f6\u00f6tlejate t\u00e4itmiseks kasutaja ruumis. Bpftime v\u00f5imaldab t\u00e4ielikult kasutaja ruumis k\u00e4itada eBPF j\u00e4lgimise ja protsesside sekkumise programme, kasutades selliseid v\u00f5imalusi nagu uprobe ja s\u00fcsteemikutsungite tarkvaraline \u00fclemineku m\u00f5ju. T\u00f5detakse, et bpftime'i t\u00f5ttu, mis v\u00e4listab liigseid konteksti vahetusi, on v\u00f5imalik saavutada k\u00fcmnekordne kulu v\u00e4henemine v\u00f5rreldes uprobe ja uretprobe funktsionaalsusega, mida pakub Linuxi tuum. Lisaks muudab bpftime oluliselt t\u00f5rkeotsingu lihtsamaks, seda saab potentsiaalselt kasutada s\u00fcsteemides ilma Linuxi tuumata ning see ei n\u00f5ua eBPF rakenduse laadimiseks tuumas laiendatud \u00f5igusi. Projekti kood on kirjutatud keeles C\/C++ ja jagatakse MIT litsentsi alusel. <\/p>\n

S\u00fcsteemikutsungite p\u00fc\u00fcdmine ja uprobe-kontrollide integreerimine on teostatud t\u00e4itmise koodeksitehnika (binary rewriting) abil, mille k\u00e4igus asendatakse s\u00fcsteemikutsungite, sisenevate punktide ja kohalike funktsioonide kutsed \u00fcmbersuunamisega silumine t\u00f6\u00f6tlejatele, muutes k\u00e4ivitatava rakenduse masinakoode, mis on oluliselt t\u00f5husam kui uprobe taseme p\u00fc\u00fcdmise korral Linuxi tuumas. <\/p>\n

Toetatakse funktsioonide asendamise v\u00f5i muutmise, t\u00f6\u00f6tlejat\u00f5mbluste (hook-ide) ja filtrite kinnitamist, parameetrite s\u00fcsteemikutsungite \u00fcmbersuunamist, blokeerimist v\u00f5i asendamist, sisenevate ja v\u00e4ljuvate punktide p\u00fc\u00fcdmist ning t\u00f6\u00f6tleja asendamist suvalises koodiseisundis. Bpftime saab kinnitada igale t\u00f6\u00f6tavale protsessile s\u00fcsteemis, ilma et oleks vaja neid taask\u00e4ivitada v\u00f5i uuesti koguda. Bpftime'i asendamine protsessides v\u00f5ib toimuda t\u00f6\u00f6tavate protsesside kaudu, kasutades ptrace'i, ja laaditavate kaudu LD_PRELOAD'i. <\/p>\n

Bpftime koosseisus arendatakse v\u00e4lja runtime, mis v\u00f5imaldab kinnitada eBPF-programme s\u00fcsteemikutsungite ja uprobe j\u00e4lgimise punktidesse; virtuaalne masin<\/a> eBPF JIT abil v\u00f5imaldab isoleeritud eBPF programmide t\u00e4itmist kasutaja protsessi tasemel (toetatakse ka AOT-kompileerimist); taustprotsess interaktsiooniks tuumaga ja tuuma uprobe-alamhulga \u00fchilduvuse korraldamiseks (bpftime toetab eBPF laadimist kasutaja ruumi tuumast, et koost\u00f6\u00f6d teha eBPF programmidega tuumas, mida kasutatakse n\u00e4iteks kprobe t\u00f6\u00f6tlemiseks v\u00f5i v\u00f5rgufiltrite rakendamiseks). <\/p>\n

eBPF virtuaalne masina on kujundatud pistikbibliotekina ja pakub ubpf-le sarnast API-d, mis v\u00f5imaldab selle funktsionaalsuse integreerimist teistesse projektidesse. Andmete kokkuv\u00f5tmiseks mitmest protsessist toetatakse \u00fchiselt kasutatavate eBPF Mapide loomist jagatud m\u00e4lus. Koos bpftime'iga saab kasutada ka t\u00fc\u00fcpilisi eBPF t\u00f6\u00f6tlejaid, mis on kirjutatud tuuma kasutamiseks, ja koostamiseks saab kasutada standardseid t\u00f6\u00f6riistu, mis p\u00f5hinevad clangil ja libbpf'il. <\/p>\n

Kasutaja ruumis v\u00f5ivad t\u00f6\u00f6tada j\u00e4lgimiss\u00fcsteemid nagu BCC, bpftrace ja Deepflow. N\u00e4iteks on demonstreeritud BCC raamistikust script sslsniff kasutamine kr\u00fcpteeritud liikluse anal\u00fc\u00fcsimiseks ja salvestamiseks nginxis. Testide k\u00e4igus langes nginx-i j\u00f5udlus sslsniff'i k\u00e4ivitamisel tuumas 58% ja kasutajaruumis t\u00f6\u00f6tava t\u00f6\u00f6tleja korral 12,3%. <\/p>\n

Protsesside j\u00e4lgimise arhitektuur, kasutades originaalset eBPF tuumas:

\"Projekt<\/center> <\/p>\n

Kasutajaruumis j\u00e4lgimise arhitektuur, kasutades bpftime:

\"Projekt<\/center> <\/p>\n

H\u00fcbriidre\u017eiim, kus bpftime t\u00f6\u00f6tab koos eBPF-iga tuumas, n\u00e4iteks v\u00f5rgufiltrite seadistamiseks v\u00f5i \u00fcksikute t\u00f6\u00f6tlejate viimiseks kasutajaruumis:

\"Projekt<\/center> <\/p>\n

Tuleviku plaanide hulgas on: v\u00f5imalus exception'e asendada (Fault Injection); kuumate patch'ide pealekandmine (Hot Patching) binaarsete kogumite t\u00f6\u00f6logika muutmiseks v\u00f5i vigade parandamiseks; Nginx'i mooduli loomine, mis v\u00f5imaldab eBPF programmidega laiendusi luua (nt d\u00fcnaamiliseks marsruutide valimiseks, vahem\u00e4luks, turvapoliitikate rakendamiseks ja koormuse tasakaalustamiseks); FUSE alams\u00fcsteemi v\u00f5imaluste laiendamine (nt eBPF programmide kujul laienduste loomine failis\u00fcsteemile vahem\u00e4luks v\u00f5i juurdep\u00e4\u00e4su haldamiseks).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 bpftime, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 runtime \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 eBPF \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. Bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0446\u0435\u043b\u0438\u043a\u043e\u043c \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f eBPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u0438 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a uprobe \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043b\u0438\u0448\u043d\u0438\u0445 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0434\u0435\u0441\u044f\u0442\u0438\u043a\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u0432 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113050,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113049","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekt bpftime arendab eBPF-i, mis t\u00f6\u00f6tab kasutajaruumi | ProHoster","description":"Esitleti projekti bpftime, mis arendab outtime'i ja virtuaalmasinat eBPF t\u00f6\u00f6tlejate t\u00e4itmiseks kasutaja ruumis. Bpftime v\u00f5imaldab t\u00e4ielikult kasutaja ruumis k\u00e4itada eBPF j\u00e4lgimis- ja protsesside sekkumise programme, mis kasutavad selliseid v\u00f5imalusi nagu uprobe ja s\u00fcsteemikutsungite programmeeritud pealekandmine. Toodud on v\u00e4lja, et bpftime, v\u00e4listades liigsed konteksti vahetused, v\u00f5imaldab saavutada k\u00fcmnekordse t\u00f5hususe kulu v\u00e4henemise.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 bpftime \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e eBPF, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0443\u044e \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 bpftime, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 runtime \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 eBPF \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. Bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0446\u0435\u043b\u0438\u043a\u043e\u043c \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f eBPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u0438 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a uprobe \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043b\u0438\u0448\u043d\u0438\u0445 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0434\u0435\u0441\u044f\u0442\u0438\u043a\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u0432 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-22T15:28:04+00:00","article:modified_time":"2024-01-22T15:28:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=113049"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113049\/revisions"}],"predecessor-version":[{"id":164070,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113049\/revisions\/164070"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/113050"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=113049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=113049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=113049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}