{"id":113049,"date":"2024-01-22T17:28:02","date_gmt":"2024-01-22T15:28:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya"},"modified":"2024-01-22T17:28:02","modified_gmt":"2024-01-22T15:28:04","slug":"proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","title":{"rendered":"Projekti bpftime zhvillon implementimin e eBPF q\u00eb funksionon n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Projekt bpftime \u00ebsht\u00eb prezantuar, i cili zhvillon runtime dhe makin\u00eb virtuale p\u00ebr ekzekutimin e p\u00ebrpunuesve eBPF n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit. Bpftime lejon ekzekutimin e plot\u00eb n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit t\u00eb programeve eBPF p\u00ebr gjurmimin dhe nd\u00ebrhyrjen n\u00eb funksionimin e proceseve, duke p\u00ebrdorur mund\u00ebsi t\u00eb tilla si uprobe dhe kapjen programore t\u00eb thirrjeve sistemike. Vler\u00ebsohet se fal\u00eb p\u00ebrjashtimit t\u00eb kalimeve t\u00eb panevojshme t\u00eb kontekstit, bpftime arriti nj\u00eb ulje dhjet\u00ebfish t\u00eb kostos krahasuar me funksionalitetin e ofruar nga uprobe dhe uretprobe, q\u00eb ofrohet nga b\u00ebrthama e Linux. P\u00ebr m\u00eb tep\u00ebr, bpftime ndjesh\u00ebm e thjesht\u00ebson debugimin, mund t\u00eb p\u00ebrdoret potencialisht n\u00eb sisteme pa b\u00ebrtham\u00ebn Linux dhe nuk k\u00ebrkon privilegje t\u00eb avancuara t\u00eb nevojshme p\u00ebr ngarkimin e aplikacionit eBPF n\u00eb b\u00ebrtham\u00eb. Kodi i projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebt C\/C++ dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn MIT. <\/p>\n

Kapja e thirrjeve sistemike dhe integrimi i verifikimeve uprobe jan\u00eb realizuar duke p\u00ebrdorur teknik\u00ebn e rishkrimit t\u00eb kodit ekzekutiv (binary rewriting), ku thirrjet p\u00ebr thirrjet sistemike, pikave t\u00eb hyrjes dhe funksioneve lokale z\u00ebvend\u00ebsohen me kalimin n\u00eb p\u00ebrpunuesit e debugimit p\u00ebrmes modifikimit t\u00eb kodit makinerik t\u00eb aplikacionit q\u00eb ekzekutohet, q\u00eb \u00ebsht\u00eb ndjesh\u00ebm m\u00eb efikase se organizimi i kapjes duke p\u00ebrdorur uprobe n\u00eb nivelin e b\u00ebrtham\u00ebs Linux. <\/p>\n

N\u00ebnkuptohen operacionet e z\u00ebvend\u00ebsimit ose ndryshimit t\u00eb funksioneve, bashkimin e p\u00ebrpunuesve (hook-\u00ebve) dhe filtrave, ridrejtimin, bllokimin ose z\u00ebvend\u00ebsimin e parametrave t\u00eb thirrjeve sistemike, kapjen e pikave t\u00eb hyrjes dhe daljes nga funksionet, si dhe z\u00ebvend\u00ebsimin e p\u00ebrpunuesve n\u00eb nj\u00eb zhvendosje t\u00eb \u00e7far\u00ebdoshme n\u00eb kod. Bpftime mund t\u00eb bashkohet me \u00e7do proces q\u00eb funksionon n\u00eb sistem pa pasur nevoj\u00eb p\u00ebr rip\u00ebrs\u00ebritjen ose rinovimin e tij. Z\u00ebvend\u00ebsimi i bpftime n\u00eb procese mund t\u00eb realizohet p\u00ebr proceset q\u00eb funksionojn\u00eb p\u00ebrmes ptrace, dhe p\u00ebr ato q\u00eb ngarkohen p\u00ebrmes LD_PRELOAD. <\/p>\n

N\u00eb p\u00ebrb\u00ebrje t\u00eb bpftime po zhvillohet nj\u00eb runtime q\u00eb lejon bashkimin e programeve eBPF n\u00eb pikat e gjurmimit t\u00eb thirrjeve sistemike dhe uprobe; makina virtuale<\/a> eBPF me JIT p\u00ebr ekzekutimin t\u00eb ve\u00e7ant\u00eb t\u00eb programeve eBPF n\u00eb nivelin e procesit t\u00eb p\u00ebrdoruesit (p\u00ebr m\u00eb tep\u00ebr, mb\u00ebshtetet kompilimi AOT); nj\u00eb proces n\u00eb sfond p\u00ebr nd\u00ebrveprimin me b\u00ebrtham\u00ebn dhe organizimin e kompatibilitetit me n\u00ebn-sistemin uprobe t\u00eb b\u00ebrtham\u00ebs (bpftime mb\u00ebshtet modin e ngarkimit t\u00eb eBPF n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit nga b\u00ebrthama p\u00ebr t\u00eb mund\u00ebsuar bashk\u00ebpunimin me programet e eBPF n\u00eb b\u00ebrtham\u00eb, t\u00eb p\u00ebrdorura, p\u00ebr shembull, p\u00ebr t\u00eb p\u00ebrpunuar kprobe ose p\u00ebr t\u00eb instaluar filtre rrjetesh). <\/p>\n

Makina virtuale eBPF \u00ebsht\u00eb e dizajnuar si nj\u00eb bibliotek\u00eb e ngjitur dhe ofron nj\u00eb API t\u00eb ngjash\u00ebm me ubpf, duke e b\u00ebr\u00eb at\u00eb t\u00eb dobishme p\u00ebr integrimin e funksionalitetit eBPF n\u00eb projekte t\u00eb tjera. P\u00ebr agregimin e p\u00ebrgjithsh\u00ebm t\u00eb t\u00eb dh\u00ebnave nga disa procese, mb\u00ebshtetet krijimi i eBPF Map-ve t\u00eb p\u00ebrbashk\u00ebta q\u00eb vendosen n\u00eb memorie t\u00eb ndar\u00eb. S\u00eb bashku me bpftime, mund t\u00eb p\u00ebrdoren trajtues t\u00eb standardizuar eBPF, t\u00eb shkruar p\u00ebr p\u00ebrdorim n\u00eb b\u00ebrtham\u00eb, dhe p\u00ebr nd\u00ebrtimin mund t\u00eb p\u00ebrdoren mjete standarde t\u00eb bazuara n\u00eb clang dhe libbpf. <\/p>\n

Me bpftime n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, mund t\u00eb ekzekutohen sisteme gjurmimi si BCC, bpftrace dhe Deepflow. P\u00ebr shembull, \u00ebsht\u00eb demonstruar p\u00ebrdorimi i skriptit sslsniff nga frameworku BCC p\u00ebr analizimin dhe ruajtjen e trafikut t\u00eb enkriptuar n\u00eb nginx. N\u00eb testet e kryera, performanca e nginx-it gjat\u00eb ekzekutimit t\u00eb sslsniff n\u00eb an\u00ebn e b\u00ebrtham\u00ebs zvog\u00eblohet me 58%, nd\u00ebrsa duke e kaluar trajtuesin n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit zvog\u00eblohet me 12.3%. <\/p>\n

Arkitektura e gjurmimit t\u00eb proceseve duke p\u00ebrdorur origjinalin eBPF n\u00eb b\u00ebrtham\u00eb:

\"Projekti<\/center> <\/p>\n

Arkitektura e gjurmimit n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit duke p\u00ebrdorur bpftime:

\"Projekti<\/center> <\/p>\n

Nj\u00eb mod i hibridizuar, ku bpftime punon s\u00eb bashku me eBPF n\u00eb b\u00ebrtham\u00eb, p\u00ebr shembull, p\u00ebr t\u00eb vendosur filtre rrjetesh ose p\u00ebr t\u00eb kaluar trajtues t\u00eb ve\u00e7ant\u00eb n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit:

\"Projekti<\/center> <\/p>\n

Nga planet p\u00ebr t\u00eb ardhmen, p\u00ebrmendet: mund\u00ebsia e vendosjes s\u00eb p\u00ebrjashtimeve (Fault Injection); instalimi i nxeht\u00eb i patch-eve (Hot Patching) p\u00ebr t\u00eb ndryshuar logjik\u00ebn e funksionimit ose p\u00ebr t\u00eb riparuar gabime n\u00eb nd\u00ebrtimet binar\u00eb; krijimi i nj\u00eb moduli p\u00ebr Nginx, duke lejuar krijimin e zgjerimeve p\u00ebrmes programeve eBPF (p\u00ebr shembull, p\u00ebr zgjedhjen dinamike t\u00eb rrug\u00ebve, keq-mbajtjen, zbatimin e politikave t\u00eb siguris\u00eb dhe balancimin e ngarkes\u00ebs); zgjerimi i mund\u00ebsive t\u00eb n\u00ebn-sistemit FUSE (p\u00ebr shembull, krijimi n\u00eb form\u00ebn e programeve eBPF t\u00eb zgjerimeve p\u00ebr FS p\u00ebr keq-mbajtjen ose menaxhimin e aksesit).
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 bpftime, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 runtime \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 eBPF \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. Bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0446\u0435\u043b\u0438\u043a\u043e\u043c \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f eBPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u0438 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a uprobe \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043b\u0438\u0448\u043d\u0438\u0445 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0434\u0435\u0441\u044f\u0442\u0438\u043a\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u0432 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113050,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113049","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekti bpftime zhvillon implementimin e eBPF, q\u00eb punon n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit | ProHoster","description":"Projektin bpftime prezanton, q\u00eb zhvillon runtime dhe makinerin\u00eb virtuale p\u00ebr t\u00eb ekzekutuar p\u00ebrpunuesit e eBPF n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 bpftime \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e eBPF, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0443\u044e \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 bpftime, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 runtime \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 eBPF \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-22T15:28:04+00:00","article:modified_time":"2024-01-22T15:28:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/113049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=113049"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/113049\/revisions"}],"predecessor-version":[{"id":164070,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/113049\/revisions\/164070"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/113050"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=113049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=113049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=113049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}