{"id":102940,"date":"2022-01-11T15:36:39","date_gmt":"2022-01-11T13:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/bumblebee-%d0%b8%d0%bd%d1%81%d1%82%d1%80%d1%83%d0%bc%d0%b5%d0%bd%d1%82%d0%b0%d1%80%d0%b8%d0%b9-%d0%b4%d0%bb%d1%8f-%d1%83%d0%bf%d1%80%d0%be%d1%89%d0%b5%d0%bd%d0%b8%d1%8f-%d1%81%d0%be%d0%b7%d0%b4"},"modified":"2022-01-11T15:36:39","modified_gmt":"2022-01-11T13:36:39","slug":"bumblebee-%d0%b8%d0%bd%d1%81%d1%82%d1%80%d1%83%d0%bc%d0%b5%d0%bd%d1%82%d0%b0%d1%80%d0%b8%d0%b9-%d0%b4%d0%bb%d1%8f-%d1%83%d0%bf%d1%80%d0%be%d1%89%d0%b5%d0%bd%d0%b8%d1%8f-%d1%81%d0%be%d0%b7%d0%b4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/bumblebee-%d0%b8%d0%bd%d1%81%d1%82%d1%80%d1%83%d0%bc%d0%b5%d0%bd%d1%82%d0%b0%d1%80%d0%b8%d0%b9-%d0%b4%d0%bb%d1%8f-%d1%83%d0%bf%d1%80%d0%be%d1%89%d0%b5%d0%bd%d0%b8%d1%8f-%d1%81%d0%be%d0%b7%d0%b4","title":{"rendered":"BumbleBee \u2014 n\u00e1stroj na zjednodu\u0161enie vytv\u00e1rania a distrib\u00facie eBPF programov","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Spolo\u010dnos\u0165 Solo.io, ktor\u00e1 vyv\u00edja produkty na zabezpe\u010denie prev\u00e1dzky cloudov\u00fdch syst\u00e9mov, mikroslu\u017eieb, izolovan\u00fdch kontajnerov a bezserverov\u00fdch v\u00fdpo\u010dtov, zverejnila otvoren\u00fd n\u00e1stroj BumbleBee, zameran\u00fd na zjednodu\u0161enie pr\u00edpravy, distrib\u00facie a sp\u00fa\u0161\u0165ania eBPF programov, ktor\u00e9 sa vykon\u00e1vaj\u00fa v \u0161peci\u00e1lnej virtu\u00e1lnej stroji v r\u00e1mci jadra Linuxu a umo\u017e\u0148uj\u00fa spracov\u00e1va\u0165 sie\u0165ov\u00e9 oper\u00e1cie, kontrolova\u0165 pr\u00edstup a sledova\u0165 \u010dinnos\u0165 syst\u00e9mov. K\u00f3d je nap\u00edsan\u00fd v jazyku Go a je distribuovan\u00fd pod licenciou Apache 2.0. <\/p>\n
BumbleBee umo\u017e\u0148uje zabali\u0165 eBPF program do kontajnerov\u00e9ho obrazu v form\u00e1te OCI (Open Container Initiative), ktor\u00fd je mo\u017en\u00e9 spusti\u0165 na ak\u00fdchko\u013evek syst\u00e9moch bez prekompil\u00e1cie a bez pou\u017e\u00edvania \u010fal\u0161\u00edch komponentov v u\u017e\u00edvate\u013eskom priestore. Interakciu s eBPF k\u00f3dom v jadre, vr\u00e1tane spracovania \u00fadajov prich\u00e1dzaj\u00facich z eBPF handlerov, preber\u00e1 BumbleBee, ktor\u00fd automaticky exportuje tieto \u00fadaje vo forme metr\u00edk, histogramov alebo logov, k ktor\u00fdm je mo\u017en\u00e9 z\u00edska\u0165 pr\u00edstup napr\u00edklad pomocou n\u00e1stroja curl. Navrhovan\u00fd pr\u00edstup umo\u017e\u0148uje v\u00fdvoj\u00e1rovi s\u00fastredi\u0165 sa na p\u00edsanie eBPF k\u00f3du a neodv\u00e1dza\u0165 sa od organiz\u00e1cie interakcie s t\u00fdmto k\u00f3dom z u\u017e\u00edvate\u013esk\u00e9ho priestoru, zostavovania a na\u010d\u00edtavania do jadra. <\/p>\n
Na spravovanie eBPF programov je k dispoz\u00edcii n\u00e1stroj v \u0161t\u00fdle Docker s n\u00e1zvom «bee», pomocou ktor\u00e9ho m\u00f4\u017eete okam\u017eite na\u010d\u00edta\u0165 po\u017eadovan\u00fd eBPF procesor z extern\u00e9ho repozit\u00e1ra a spusti\u0165 ho na lok\u00e1lnom syst\u00e9me. N\u00e1stroj umo\u017e\u0148uje generova\u0165 kostru k\u00f3du v jazyku C pre eBPF procesory vybranej t\u00e9my (v s\u00fa\u010dasnosti s\u00fa podporovan\u00e9 len procesory pre sie\u0165ov\u00e9 a s\u00faborov\u00e9 oper\u00e1cie, ktor\u00e9 zachyt\u00e1vaj\u00fa volania sie\u0165ov\u00e9ho z\u00e1sobn\u00edka a s\u00faborov\u00fdch syst\u00e9mov). Na z\u00e1klade vytvorenej kostry m\u00f4\u017ee v\u00fdvoj\u00e1r r\u00fdchlo implementova\u0165 po\u017eadovan\u00fa funk\u010dnos\u0165. <\/p>\n
Na rozdiel od BCC (BPF Compiler Collection) v BumbleBee neprebieha \u00fapln\u00e9 prekompilovanie k\u00f3du spracovate\u013ea pre ka\u017ed\u00fa verziu jadra Linux (BCC pou\u017e\u00edva kompil\u00e1ciu za behu pomocou Clang pri ka\u017edom spusten\u00ed eBPF programu). Na rie\u0161enie probl\u00e9mov s prenosite\u013enos\u0165ou sa vyv\u00edjaj\u00fa n\u00e1stroje CO-RE a libbpf, ktor\u00e9 umo\u017e\u0148uj\u00fa zostavi\u0165 k\u00f3d iba raz a pou\u017ei\u0165 \u0161peci\u00e1lny univerz\u00e1lny loader, ktor\u00fd prisp\u00f4sobuje na\u010d\u00edtavan\u00fd program aktu\u00e1lnemu jadru a typom BTF (BPF Type Format). BumbleBee je nadstavbou nad libbpf a poskytuje \u010fal\u0161ie typy na automatick\u00fa interpret\u00e1ciu a zobrazenie d\u00e1t umiestnen\u00fdch v \u0161tandardn\u00fdch pre eBPF map-\u0161trukt\u00farach RingBuffer a HashMap. <\/p>\n
Na zostavenie kone\u010dnej eBPF programu a ulo\u017eenie vo form\u00e1te OCI obrazu sta\u010d\u00ed vykona\u0165 pr\u00edkaz «bee build s\u00fabor_s_k\u00f3dmi n\u00e1zov:verziu», a na spustenie pr\u00edkaz «bee run n\u00e1zov:verziu». Predvolene sa z\u00edskan\u00e9 udalosti od procesora bud\u00fa zobrazova\u0165 v okne termin\u00e1lu, ale ak je to potrebn\u00e9, d\u00e1ta je mo\u017en\u00e9 z\u00edska\u0165 pomocou util\u00edt curl alebo wget k viazan\u00e9mu sie\u0165ov\u00e9mu portu procesora. Procesory je mo\u017en\u00e9 distribuova\u0165 cez OCI kompatibiln\u00e9 repozit\u00e1re, napr\u00edklad na spustenie extern\u00e9ho procesora z repozit\u00e1ra ghcr.io (GitHub Container Registry) m\u00f4\u017eete vykona\u0165 pr\u00edkaz «bee run ghcr.io\/solo-io\/bumblebee\/tcpconnect:$(bee version)». Na umiestnenie procesora do repozi\u00e1ra je navrhnut\u00fd pr\u00edkaz «bee push», a na viazanie verzie \u2014 «bee tag». \n Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"