{"id":32586,"date":"2019-10-31T21:47:51","date_gmt":"2019-10-31T18:47:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp\/"},"modified":"2019-10-31T21:47:51","modified_gmt":"2019-10-31T18:47:51","slug":"kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","title":{"rendered":"Cloudflare avalikustas xdpcap'i, XDP-alusel oleva liiklusanal\u00fcsaatori","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cloudflare esituse<\/a><\/noindex> avatud projekt xdpcap<\/a><\/noindex>, mille raames arendatakse tcpdumpile sarnast v\u00f5rgu paketianal\u00fcsaatorit, mis on ehitatud aluseks XDP<\/a><\/noindex> (eXpress Data Path). Projekti kood on kirjutatud Go keeles ja GNU \u00dcldine Avaliku litsentsi alusel.<\/a><\/noindex> ja BSD litsentsi alusel. Projekt on samuti valmistatud<\/a><\/noindex> raamatukogu eBPF liiklusprotsessorite sidumiseks Go keeles kirjutatud rakendustest.<\/p>\n

Utiliit xdpcap on \u00fchilduv tcpdump\/libpcap filtreerimisavaldistega ja v\u00f5imaldab oluliselt suuremaid andmevooge k\u00e4sitleda samal riistvaral. Xdpcap-d saab kasutada ka t\u00f5rkeotsinguks tingimustes, kus tavap\u00e4rane tcpdump ei sobi, n\u00e4iteks, kui kasutatakse filtreerimis- ja DoS-r\u00fcnnakute kaitses\u00fcsteemide, koormuse tasakaalustamiss\u00fcsteemide, mis kasutavad Linuxi tuuma XDP s\u00fcsteemi, mis t\u00f6\u00f6tleb pakette enne nende t\u00f6\u00f6tlemist Linuxi v\u00f5rgu stackis (tcpdump ei n\u00e4e pakette, mida XDP t\u00f6\u00f6tleja on tagasi l\u00fckanud).<\/p>\n

Suure j\u00f5udluse saavutamine on v\u00f5imalik eBPF ja XDP s\u00fcsteemide kasutamise t\u00f5ttu. eBPF on Linuxi tuuma sisse ehitatud baitekoodi t\u00f5lkija, mis v\u00f5imaldab luua k\u00f5rge j\u00f5udlusega sisenevate\/v\u00e4ljuvate pakettide t\u00f6\u00f6tlejaid, mis teevad otsuseid nende suunamise v\u00f5i tagasi l\u00fckkamise kohta. JIT-compilatori abil t\u00f5lgitakse eBPF baitekood reaalajas masinakeele k\u00e4sklusteks ja seda t\u00e4idetakse kohaliku koodi kiirusel. XDP s\u00fcsteem (eXpress Data Path) t\u00e4iendab eBPF-i v\u00f5imalusega k\u00e4ivitada BPF-programme v\u00f5rgu draiveri tasemel, toetades otsep\u00e4\u00e4su DMA-paketiv\u00f5rku ja t\u00f6\u00f6tlemist enne skbuff-iblioteegi eraldamist v\u00f5rgu stackis.<\/p>\n

Nagu tcpdump, t\u00f5lgib utiliit xdpcap esmalt k\u00f5rgema taseme liiklusfiltreerimise reeglid klassikaliseks BPF (cBPF) esinduseks, kasutades p\u00f5hi biblioteegi libpcap, seej\u00e4rel muundab need eBPF alamprogrammide vormi, kasutades kompilaatorit cbpfc<\/a><\/noindex>, kasutades LLVM\/Clang'i arendusi. Tulemuseks on teave liikluse kohta, mis salvestatakse standardses pcap formaadis, mis v\u00f5imaldab kasutatud xdpcap liiklusdumpsi hiljem anal\u00fc\u00fcsida tcpdumpis ja muudes olemasolevates liikluse anal\u00fcsaatorites. N\u00e4iteks, kui soovite j\u00e4\u00e4dvustada DNS liikluse teavet, saate k\u00e4ivitada k\u00e4sku «xdpcap \/path\/to\/hook capture.pcap ‘ip and udp port 53′» selle asemel, et kasutada «tcpdump ip and udp port 53», p\u00e4rast mida saab faili capture.pcap kasutada n\u00e4iteks k\u00e4suga «tcpdump -r» v\u00f5i Wiresharkis.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 xdpcap, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0445\u043e\u0436\u0438\u0439 \u043d\u0430 tcpdump \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP (eXpress Data Path). \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 eBPF-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go. \u0423\u0442\u0438\u043b\u0438\u0442\u0430 xdpcap \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u0430 \u0441 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 tcpdump\/libpcap […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32586","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cloudflare avaldas xdpcap, XDP alusel t\u00f6\u00f6tava liiklusanal\u00fc\u00fcsi t\u00f6\u00f6riista | ProHoster","description":"Cloudflare esitles avatud projekti","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 xdpcap, \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:47:51+00:00","article:modified_time":"2019-10-31T18:47:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32586","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 11:37:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:56:29","updated":"2026-01-21 11:37:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=32586"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32586\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=32586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=32586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=32586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}