{"id":100138,"date":"2021-05-11T16:22:58","date_gmt":"2021-05-11T14:22:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-podgotovil-realizacziyu-ebpf-dlya-windows"},"modified":"2021-05-11T16:22:58","modified_gmt":"2021-05-11T14:22:59","slug":"microsoft-podgotovil-realizacziyu-ebpf-dlya-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/microsoft-podgotovil-realizacziyu-ebpf-dlya-windows","title":{"rendered":"Microsoft ka p\u00ebrgatitur implementimin e eBPF p\u00ebr Windows.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Kompania Microsoft publikoi zbatimin e n\u00ebn-sistemit eBPF p\u00ebr Windows, q\u00eb lejon ekzekutimin e trajtuesve t\u00eb rastit, q\u00eb operojn\u00eb n\u00eb nivelin e b\u00ebrtham\u00ebs s\u00eb sistemit operativ. eBPF ofron nj\u00eb interpretues t\u00eb bytecode i integruar n\u00eb b\u00ebrtham\u00eb, duke mund\u00ebsuar krijimin e trajtuesve t\u00eb ngarkuesh\u00ebm nga hap\u00ebsira e p\u00ebrdoruesit p\u00ebr operacionet rrjet, kontrollin e aksesit dhe monitorimin e funksionimit t\u00eb sistemeve. eBPF \u00ebsht\u00eb i p\u00ebrfshir\u00eb n\u00eb b\u00ebrtham\u00ebn Linux q\u00eb nga versioni 3.18 dhe lejon p\u00ebrpunimin e paketimeve rrjet t\u00eb ardhshme\/dh\u00ebn\u00ebse, ridrejtimin e paketimeve, menaxhimin e bandwidth-it, kapjen e thirrjeve sistemore, kontrollin e aksesit dhe kryerjen e gjurmimit. Fal\u00eb p\u00ebrdorimit t\u00eb JIT-compilation, bytecode p\u00ebrkthhet n\u00eb udh\u00ebzime makinerike n\u00eb koh\u00eb reale dhe ekzekutohet me performanc\u00ebn e kodit t\u00eb kompiluar. Burimet e eBPF p\u00ebr Windows jan\u00eb t\u00eb hapura n\u00ebn licenc\u00ebn MIT. <\/p>\n
eBPF p\u00ebr Windows mund t\u00eb p\u00ebrdoret me mjetet ekzistuese p\u00ebr pun\u00ebn me eBPF dhe ofron nj\u00eb API standard q\u00eb p\u00ebrdoret p\u00ebr aplikacionet eBPF n\u00eb Linux. Projekti gjithashtu lejon kompilimin e kodit t\u00eb shkruar n\u00eb gjuh\u00ebn C n\u00eb bytecode eBPF p\u00ebrmes kompiluesit standard t\u00eb eBPF t\u00eb bazuar n\u00eb Clang dhe ekzekutimin e trajtuesve eBPF t\u00eb krijuar tashm\u00eb p\u00ebr Linux mbi b\u00ebrtham\u00ebn Windows, duke ofruar nj\u00eb shtres\u00eb t\u00eb ve\u00e7ant\u00eb t\u00eb pajtueshm\u00ebris\u00eb dhe duke mb\u00ebshtetur API-n\u00eb standarde Libbpf p\u00ebr pajtueshm\u00ebrin\u00eb me aplikacionet q\u00eb bashk\u00ebpunojn\u00eb me programet eBPF. Po ashtu, ofrohen shtresa q\u00eb ofrojn\u00eb hook-e t\u00eb ngjashme me Linux p\u00ebr XDP (eXpress Data Path) dhe lidhjen e socket-eve, q\u00eb abstrahojn\u00eb qasjen n\u00eb grumbullin rrjet dhe drejtuesit e rrjeteve Windows. N\u00eb planet e ardhshme, parashikohet ofrimi i pajtueshm\u00ebris\u00eb s\u00eb plot\u00eb n\u00eb nivelin e burimeve me trajtuesit standard t\u00eb eBPF n\u00eb Linux.
<\/center> <\/p>\n
Dallimi kryesor i zbatimit t\u00eb eBPF p\u00ebr Windows \u00ebsht\u00eb p\u00ebrdorimi i nj\u00eb verifikuesi alternativ t\u00eb bytecode, fillimisht t\u00eb propozuar nga punonj\u00ebsit e kompanis\u00eb VMware dhe hulumtuesit nga universitetet kanadeze dhe izraelite. Verifikuesi ekzekutohet n\u00eb nj\u00eb proces t\u00eb ve\u00e7uar t\u00eb izoluar n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit dhe aplikohet para ekzekutimit t\u00eb programeve BPF me q\u00ebllim identifikimin e gabimeve dhe bllokimin e aktivitetit t\u00eb mundsh\u00ebm t\u00eb d\u00ebmsh\u00ebm. <\/p>\n
P\u00ebr verifikimin n\u00eb eBPF p\u00ebr Windows, p\u00ebrdoret metoda e analiz\u00ebs statike e bazuar n\u00eb interpretimin abstrakt (Abstract Interpretation), e cila n\u00eb krahasim me verifikuesin e eBPF p\u00ebr Linux tregon nj\u00eb nivel m\u00eb t\u00eb ul\u00ebt t\u00eb alarmeve t\u00eb rreme, mb\u00ebshtet analiz\u00ebn e cikleve dhe siguron nj\u00eb shkall\u00ebzueshm\u00ebri t\u00eb mir\u00eb. Metoda merr parasysh shum\u00eb shabllone tipik\u00eb t\u00eb ekzekutimit, t\u00eb marra nga analiza e programeve ekzistuese t\u00eb eBPF. <\/p>\n
Pas verifikimit, bytecode-i kalon n\u00eb interpretuesin q\u00eb funksionon n\u00eb nivelin e b\u00ebrtham\u00ebs, ose kalon p\u00ebrmes JIT-kompilatorit me ekzekutimin e kodit t\u00eb rezultuar t\u00eb makin\u00ebs me t\u00eb drejtat e b\u00ebrtham\u00ebs. P\u00ebr izolimin e p\u00ebrpunuesve eBPF n\u00eb nivelin e b\u00ebrtham\u00ebs, aplikohet mekanizmi HVCI (HyperVisor-enforced Code Integrity), i cili p\u00ebrdor mjete virtualizimi p\u00ebr t\u00eb mbrojtur proceset n\u00eb b\u00ebrtham\u00eb dhe siguron konfirmimin e integritetit t\u00eb kodit t\u00eb ekzekutuar p\u00ebrmes n\u00ebnshkrimit digjital. Nj\u00eb kufizim i HVCI \u00ebsht\u00eb mund\u00ebsia e verifikimit vet\u00ebm t\u00eb programeve eBPF q\u00eb interpretohen dhe pamund\u00ebsia e p\u00ebrdorimit t\u00eb p\u00ebrbashk\u00ebt me JIT (ofrohet zgjidhja \u2014 ose performanca, ose mbrojtja shtes\u00eb). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Microsoft](\"\/wp-content\/uploads\/2021\/05\/1daa28968dafec017e92e435fc479cae.png\")
<\/center> <\/p>\n