{"id":32586,"date":"2019-10-31T21:47:51","date_gmt":"2019-10-31T18:47:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp\/"},"modified":"2019-10-31T21:47:51","modified_gmt":"2019-10-31T18:47:51","slug":"kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","title":{"rendered":"Firma Cloudflare opublikowa\u0142a xdpcap, analizator ruchu oparty na podsystemie XDP.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Firma Cloudflare przedstawi\u0142a<\/a><\/noindex> otwarty projekt xdpcap<\/a><\/noindex>, w ramach kt\u00f3rego rozwijany jest analizator pakiet\u00f3w sieciowych podobny do tcpdump, oparty na subsystemie XDP<\/a><\/noindex> (eXpress Data Path). Kod projektu zosta\u0142 napisany w j\u0119zyku Go i rozpowszechniany<\/a><\/noindex> jest udost\u0119pniany na licencji BSD. Projekt obejmuje r\u00f3wnie\u017c przygotowano<\/a><\/noindex> bibliotek\u0119 do wi\u0105zania eBPF-obs\u0142uguj\u0105cych aplikacji pakiet\u00f3w w j\u0119zyku Go.<\/p>\n

Narz\u0119dzie xdpcap jest zgodne z wyra\u017ceniami filtruj\u0105cymi tcpdump\/libpcap i pozwala na przetwarzanie na tym samym sprz\u0119cie znacznie wi\u0119kszych ilo\u015bci ruchu. Xdpcap mo\u017ce by\u0107 r\u00f3wnie\u017c stosowane do debugowania w warunkach, gdy zwyk\u0142y tcpdump jest nieprzydatny, na przyk\u0142ad, gdy stosowane s\u0105 systemy filtracji, zabezpieczenia przed atakami DoS oraz r\u00f3wnowa\u017cenia obci\u0105\u017cenia, wykorzystuj\u0105ce subsystem j\u0105dra Linux XDP, obs\u0142uguj\u0105ce pakiety na etapie przed ich przetworzeniem przez stos sieciowy j\u0105dra Linux (tcpdump nie widzi pakiet\u00f3w, kt\u00f3re zosta\u0142y odrzucone przez procesor XDP).<\/p>\n

Wysoka wydajno\u015b\u0107 jest osi\u0105gana dzi\u0119ki zastosowaniu subsystem\u00f3w eBPF i XDP. eBPF to osadzony w j\u0105drze Linux interpreter bajtowego kodu, kt\u00f3ry pozwala tworzy\u0107 wysoko wydajne procesory pakiet\u00f3w przychodz\u0105cych\/wychodz\u0105cych, podejmuj\u0105c decyzje dotycz\u0105ce ich przekierowania lub odrzucenia. Dzi\u0119ki kompilatorowi JIT kod bajtowy eBPF jest w locie t\u0142umaczony na instrukcje maszynowe i wykonywany z wydajno\u015bci\u0105 kodu natywnego. Subsystem XDP (eXpress Data Path) uzupe\u0142nia eBPF mo\u017cliwo\u015bci\u0105 uruchamiania program\u00f3w BPF na poziomie sterownika sieciowego, z obs\u0142ug\u0105 bezpo\u015bredniego dost\u0119pu do bufora DMA pakiet\u00f3w oraz dzia\u0142aniem na etapie przed przydzieleniem bufora sk_buff przez stos sieciowy.<\/p>\n

Podobnie jak tcpdump, narz\u0119dzie xdpcap pocz\u0105tkowo t\u0142umaczy zasady filtracji ruchu na wysokim poziomie na klasyczne przedstawienie BPF (cBPF) za pomoc\u0105 standardowej biblioteki libpcap, a nast\u0119pnie przekszta\u0142ca je w posta\u0107 podprogram\u00f3w eBPF, korzystaj\u0105c z kompilatora cbpfc<\/a><\/noindex>, wykorzystuj\u0105cy technologie LLVM\/Clang. Informacje o ruchu s\u0105 zapisywane w standardowym formacie pcap, co pozwala na wykorzystanie przygotowanego w xdpcap zrzutu ruchu do dalszej analizy w tcpdump i innych istniej\u0105cych analizatorach ruchu. Na przyk\u0142ad, aby przechwyci\u0107 informacje o ruchu DNS, zamiast polecenia \u201etcpdump ip and udp port 53\u201d mo\u017cna uruchomi\u0107 \u201exdpcap \/path\/to\/hook capture.pcap 'ip and udp port 53'\u201d, a nast\u0119pnie u\u017cy\u0107 pliku capture.pcap, na przyk\u0142ad z poleceniem \u201etcpdump -r\u201d lub w Wireshark.<\/p>\n

<\/a><\/noindex><\/p>\n

\u0179r\u00f3d\u0142o: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 xdpcap, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0445\u043e\u0436\u0438\u0439 \u043d\u0430 tcpdump \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP (eXpress Data Path). \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 eBPF-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go. \u0423\u0442\u0438\u043b\u0438\u0442\u0430 xdpcap \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u0430 \u0441 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 tcpdump\/libpcap […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32586","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firma Cloudflare opublikowa\u0142a xdpcap, analizator ruchu oparty na subsystemie XDP | ProHoster","description":"Firma Cloudflare przedstawi\u0142a otwarty projekt","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 xdpcap, \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:47:51+00:00","article:modified_time":"2019-10-31T18:47:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32586","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 11:37:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:56:29","updated":"2026-01-21 11:37:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/32586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=32586"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/32586\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=32586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=32586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=32586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}