{"id":32586,"date":"2019-10-31T21:47:51","date_gmt":"2019-10-31T18:47:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp\/"},"modified":"2019-10-31T21:47:51","modified_gmt":"2019-10-31T18:47:51","slug":"kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","title":{"rendered":"Spolo\u010dnos\u0165 Cloudflare zverejnila xdpcap, analyz\u00e1tor prev\u00e1dzky na b\u00e1ze subsyst\u00e9mu XDP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Firma Cloudflare predstavila<\/a><\/noindex> otvoren\u00fd projekt xdpcap<\/a><\/noindex>, v r\u00e1mci ktor\u00e9ho sa vyv\u00edja analyz\u00e1tor sie\u0165ov\u00fdch paketov podobn\u00fd tcpdumpu, postaven\u00fd na b\u00e1ze subsyst\u00e9mu XDP<\/a><\/noindex> (eXpress Data Path). K\u00f3d projektu je nap\u00edsan\u00fd v jazyku Go a distribuovan\u00fd<\/a><\/noindex> pod licenciou BSD. Projekt tie\u017e pripraven\u00e1<\/a><\/noindex> poskytuje kni\u017enicu na viazanie eBPF spracovate\u013eov prev\u00e1dzky z aplik\u00e1ci\u00ed nap\u00edsan\u00fdch v jazyku Go.<\/p>\n

N\u00e1stroj xdpcap je kompatibiln\u00fd s v\u00fdrazmi filtrovania tcpdump\/libpcap a umo\u017e\u0148uje spracov\u00e1va\u0165 na tej istej v\u00fdbave podstatne v\u00e4\u010d\u0161ie objemy prev\u00e1dzky. Xdpcap m\u00f4\u017ee by\u0165 tie\u017e pou\u017eit\u00fd na lad\u011bn\u00ed v podmienkach, kde je be\u017en\u00fd tcpdump nepou\u017eite\u013en\u00fd, napr\u00edklad ke\u010f sa pou\u017e\u00edvaj\u00fa syst\u00e9my filtrovania, ochrany pred DoS \u00fatokmi a vyva\u017eovania z\u00e1\u0165a\u017ee, ktor\u00e9 vyu\u017e\u00edvaj\u00fa subsyst\u00e9m jadra Linuxu XDP spracov\u00e1vaj\u00faci pakety v \u0161t\u00e1diu pred ich spracovan\u00edm sie\u0165ov\u00fdm z\u00e1sobn\u00edkom jadra Linuxu (tcpdump nevid\u00ed pakety, ktor\u00e9 boli odmietnut\u00e9 spracovate\u013eom XDP).<\/p>\n

Vysok\u00fd v\u00fdkon sa dosahuje v\u010faka vyu\u017eitiu subsyst\u00e9mov eBPF a XDP. eBPF predstavuje vstavan\u00fd interpret\u00e1tor bytek\u00f3du v jadre Linuxu, ktor\u00fd umo\u017e\u0148uje vytv\u00e1ra\u0165 vysokov\u00fdkonn\u00e9 spracovate\u013eov prich\u00e1dzaj\u00facich\/odch\u00e1dzaj\u00facich paketov s rozhodovan\u00edm o ich presmerovan\u00ed alebo odmietnut\u00ed. Pomocou JIT kompil\u00e1tora sa bytek\u00f3d eBPF za behu preklad\u00e1 na strojov\u00e9 in\u0161trukcie a vykon\u00e1va sa s v\u00fdkonom nat\u00edvneho k\u00f3du. Subsystem XDP (eXpress Data Path) dop\u013a\u0148a eBPF mo\u017enos\u0165ou sp\u00fa\u0161\u0165a\u0165 BPF programy na \u00farovni sie\u0165ov\u00e9ho ovl\u00e1da\u010da, s podporou priameho pr\u00edstupu k DMA bufferu paketov a pr\u00e1cou v \u0161t\u00e1diu pred alokovan\u00edm bufferu skbuff sie\u0165ov\u00fdm z\u00e1sobn\u00edkom.<\/p>\n

Rovnako ako tcpdump, n\u00e1stroj xdpcap najprv preklad\u00e1 vysok\u00fa \u00farove\u0148 pravidiel filtrovania prev\u00e1dzky do klasick\u00e9ho zobrazenia BPF (cBPF) pomocou \u0161tandardnej kni\u017enice libpcap, po \u010dom ich prev\u00e1dza do formy podprogramov eBPF, vyu\u017e\u00edvaj\u00fac kompil\u00e1tor cbpfc<\/a><\/noindex>, vyu\u017e\u00edvaj\u00faci v\u00fdstupy LLVM\/Clang. V\u00fdstupy o prem\u00e1vke s\u00fa ukladan\u00e9 v \u0161tandardnom form\u00e1te pcap, \u010do umo\u017e\u0148uje pou\u017ei\u0165 vygenerovan\u00fd dump prem\u00e1vky v xdpcap na n\u00e1sledn\u00e9 sk\u00famanie v tcpdump a in\u00fdch existuj\u00facich analyz\u00e1toroch prem\u00e1vky. Napr\u00edklad na zachytenie inform\u00e1ci\u00ed o prem\u00e1vke DNS namiesto pr\u00edkazu \u201etcpdump ip and udp port 53\u201c m\u00f4\u017eete spusti\u0165 \u201exdpcap \/path\/to\/hook capture.pcap 'ip and udp port 53'\u201c, po \u010dom m\u00f4\u017eete pou\u017ei\u0165 s\u00fabor capture.pcap, napr\u00edklad s pr\u00edkazom \u201etcpdump -r\u201c alebo vo Wireshark.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 xdpcap, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0445\u043e\u0436\u0438\u0439 \u043d\u0430 tcpdump \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP (eXpress Data Path). \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 eBPF-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go. \u0423\u0442\u0438\u043b\u0438\u0442\u0430 xdpcap \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u0430 \u0441 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 tcpdump\/libpcap […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32586","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Spolo\u010dnos\u0165 Cloudflare uverejnila xdpcap, analyz\u00e1tor prev\u00e1dzky zalo\u017een\u00fd na subsyst\u00e9me XDP | ProHoster","description":"Spolo\u010dnos\u0165 Cloudflare predstavila otvoren\u00fd projekt","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 xdpcap, \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b XDP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/kompaniya-cloudflare-opublikovala-xdpcap-analizator-trafika-na-osnove-podsistemy-xdp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:47:51+00:00","article:modified_time":"2019-10-31T18:47:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32586","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 11:37:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:56:29","updated":"2026-01-21 11:37:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/32586","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=32586"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/32586\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=32586"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=32586"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=32586"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}