{"id":100138,"date":"2021-05-11T16:22:58","date_gmt":"2021-05-11T14:22:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-podgotovil-realizacziyu-ebpf-dlya-windows"},"modified":"2021-05-11T16:22:58","modified_gmt":"2021-05-11T14:22:59","slug":"microsoft-podgotovil-realizacziyu-ebpf-dlya-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/microsoft-podgotovil-realizacziyu-ebpf-dlya-windows","title":{"rendered":"Microsoft ka p\u00ebrgatitur implementimin e eBPF p\u00ebr Windows","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Microsoft publikoi nj\u00eb implementim t\u00eb n\u00ebn\u00ebsis\u00eb eBPF p\u00ebr Windows, i cili lejon ekzekutimin e trajtuesve t\u00eb arbitrar\u00eb q\u00eb funksionojn\u00eb n\u00eb nivelin e b\u00ebrtham\u00ebs s\u00eb sistemit operativ. eBPF ofron nj\u00eb interpreter t\u00eb inkorporuar n\u00eb b\u00ebrtham\u00eb p\u00ebr bytecode, duke mund\u00ebsuar krijimin e trajtuesve t\u00eb operacioneve rrjetore t\u00eb ngarkueshme nga hap\u00ebsira e p\u00ebrdoruesit, p\u00ebr t\u00eb kontrolluar qasjen dhe p\u00ebr t\u00eb monitoruar funksionimin e sistemeve. eBPF \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb b\u00ebrtham\u00ebn Linux q\u00eb nga nxjerrja 3.18 dhe lejon p\u00ebrpunimin e paketimeve rrjetore hyr\u00ebse\/dal\u00ebse, ridrejtimin e paketimeve, menaxhimin e bandwidth-it, kapjen e thirrjeve sistemore, kontrollin e qasjes dhe ndihmon n\u00eb gjurmimin. Fal\u00eb p\u00ebrdorimit t\u00eb JIT-kompilimit, bytecode n\u00eb fluks transponohet n\u00eb udh\u00ebzime makinerie dhe ekzekutohet me performanc\u00eb t\u00eb kodit t\u00eb kompiluar. Kodet burimore eBPF p\u00ebr Windows jan\u00eb t\u00eb hapura n\u00ebn licenc\u00ebn MIT. <\/p>\n
eBPF p\u00ebr Windows mund t\u00eb p\u00ebrdoret me mjetet ekzistuese p\u00ebr t\u00eb punuar me eBPF dhe ofron nj\u00eb API tipik, t\u00eb aplikuar p\u00ebr aplikacionet eBPF n\u00eb Linux. Projekti lejon gjithashtu t\u00eb kompilosh kodin e shkruar n\u00eb gjuh\u00ebn C n\u00eb bytecode eBPF me ndihm\u00ebn e kompilatorit standart eBPF q\u00eb bazohet n\u00eb Clang dhe t\u00eb ekzekutosh trajtuesit eBPF t\u00eb krijuar p\u00ebr Linux mbi b\u00ebrtham\u00ebn Windows, duke ofruar nj\u00eb nd\u00ebrfaqe t\u00eb ve\u00e7ant\u00eb p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb dhe mb\u00ebshtetje standarde p\u00ebr API-n\u00eb Libbpf p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb me aplikacionet q\u00eb nd\u00ebrveprojn\u00eb me programet eBPF. Po ashtu ofrohen nd\u00ebrfaqe q\u00eb ofrojn\u00eb hook-e t\u00eb ngjashme me Linux p\u00ebr XDP (eXpress Data Path) dhe socket bind, duke abstruar aksesin n\u00eb grumbullin rrjetor dhe shofer\u00ebt rrjetor\u00eb t\u00eb Windows. N\u00eb planet p\u00ebrfshihet ofrimi i p\u00ebrputhshm\u00ebris\u00eb s\u00eb plot\u00eb n\u00eb nivelin e kodeve burimore me trajtuesit tipik\u00eb eBPF p\u00ebr Linux.
<\/center> <\/p>\n
Dallimi ky\u00e7 i implementimit t\u00eb eBPF p\u00ebr Windows \u00ebsht\u00eb p\u00ebrdorimi i nj\u00eb verifikatori alternativ t\u00eb bytecode, fillimisht t\u00eb propozuar nga punonj\u00ebsit e VMware dhe studiues t\u00eb universiteteve kanadeze dhe israeliote. Verifikatori ekzekutohet n\u00eb nj\u00eb proces t\u00eb ve\u00e7uar t\u00eb izoluara n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit dhe aplikohet para ekzekutimit t\u00eb programeve BPF me q\u00ebllim p\u00ebr t\u00eb identifikuar gabimet dhe p\u00ebr t\u00eb bllokuar aktivitetin e mundsh\u00ebm t\u00eb d\u00ebmsh\u00ebm. <\/p>\n
P\u00ebr verifikimin n\u00eb eBPF p\u00ebr Windows, p\u00ebrdoret nj\u00eb metod\u00eb analize statike e bazuar n\u00eb interpretimin abstrakt, i cili, n\u00eb krahasim me verifikuesin e eBPF p\u00ebr Linux, tregon nj\u00eb nivel m\u00eb t\u00eb ul\u00ebt t\u00eb alarmeve t\u00eb rreme, mb\u00ebshtet analiz\u00ebn e cikleve dhe siguron nj\u00eb shkall\u00ebzim t\u00eb mir\u00eb. Metoda merr parasysh shum\u00eb modele ekzekutimi, t\u00eb nxjerra nga analiza e programeve ekzistuese eBPF. <\/p>\n
Pas verifikimit, kodi bajt kalon n\u00eb interpretorin q\u00eb funksionon n\u00eb nivelin e b\u00ebrtham\u00ebs, ose kalon p\u00ebrmes JIT-kompilatorit dhe pastaj ekzekutohet kodi i makin\u00ebs rezultues me t\u00eb drejtat e b\u00ebrtham\u00ebs. P\u00ebr t\u00eb izoluar p\u00ebrpunuesit e eBPF n\u00eb nivelin e b\u00ebrtham\u00ebs, p\u00ebrdoret mekanizmi HVCI (HyperVisor-enforced Code Integrity), i cili p\u00ebrdor mjete virtualizimi p\u00ebr t\u00eb mbrojtur proceset n\u00eb b\u00ebrtham\u00eb dhe ofron konfirmimin e integritetit t\u00eb kodit q\u00eb ekzekutohet p\u00ebrmes n\u00ebnshkrimit dixhital. Kufizimi i HVCI \u00ebsht\u00eb mund\u00ebsia e verifikimit vet\u00ebm t\u00eb programeve eBPF t\u00eb interpretuara dhe pamund\u00ebsia e p\u00ebrdorimit s\u00eb bashku me JIT (ofrohet nj\u00eb zgjedhje \u2014 ose performanca, ose mbrojtje shtes\u00eb). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Microsoft](\"\/wp-content\/uploads\/2021\/05\/1daa28968dafec017e92e435fc479cae.png\")
<\/center> <\/p>\n