{"id":113049,"date":"2024-01-22T17:28:02","date_gmt":"2024-01-22T15:28:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya"},"modified":"2024-01-22T17:28:02","modified_gmt":"2024-01-22T15:28:04","slug":"proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","title":{"rendered":"Projekti bpftime zhvillon implementimin e eBPF, q\u00eb funksionon n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Projekti bpftime \u00ebsht\u00eb prezantuar, duke zhvilluar nj\u00eb runtime dhe makin\u00eb virtuale p\u00ebr ekzekutimin e p\u00ebrpunuesve eBPF n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit. Bpftime lejon ekzekutimin e programeve eBPF p\u00ebr gjurmimin dhe nd\u00ebrhyrjen n\u00eb funksionimin e proceseve krejt\u00ebsisht n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit, duke p\u00ebrdorur mund\u00ebsit\u00eb si uprobe dhe kapjen programore t\u00eb thirrjeve sistemore. V\u00ebrehet se, duke p\u00ebrjashtuar kalimet e panevojshme t\u00eb kontekstit, bpftime arrin nj\u00eb reduktim dhjet\u00ebfish t\u00eb kostove krahasuar me p\u00ebrdorimin e funksionalitetit uprobe dhe uretprobe t\u00eb ofruar nga b\u00ebrthama Linux. P\u00ebr m\u00eb tep\u00ebr, bpftime e thjeshton ndjesh\u00ebm debimin, potencialisht mund t\u00eb p\u00ebrdoret n\u00eb sisteme pa b\u00ebrtham\u00eb Linux dhe nuk k\u00ebrkon privilegje t\u00eb avancuara t\u00eb nevojshme p\u00ebr ngarkimin e aplikacionit eBPF n\u00eb b\u00ebrtham\u00eb. Kodi i projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebt C\/C++ dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn MIT. <\/p>\n

Kapja e thirrjeve sistemore dhe integrimi i kontrollimeve uprobe \u00ebsht\u00eb realizuar duke p\u00ebrdorur teknik\u00ebn e ri-shkrimit t\u00eb kodit ekzekutiv (binary rewriting), ku thirrjet n\u00eb thirrje sistemore, pika hyr\u00ebse dhe funksione lokale z\u00ebvend\u00ebsohen me kalime n\u00eb trajtuesit debues p\u00ebrmes modifikimit t\u00eb kodit t\u00eb makin\u00ebs s\u00eb aplikacionit n\u00eb ekzekutim, q\u00eb \u00ebsht\u00eb shum\u00eb m\u00eb efektive sesa organizimi i kapjes duke p\u00ebrdorur uprobe n\u00eb nivelin e b\u00ebrtham\u00ebs Linux. <\/p>\n

Mb\u00ebshteten operacionet e z\u00ebvend\u00ebsimit ose ndryshimit t\u00eb funksioneve, lidhjeve t\u00eb trajtuesve (hook) dhe filtreve, ridrejtimit, bllokimit ose z\u00ebvend\u00ebsimit t\u00eb parametrave t\u00eb thirrjeve sistemore, kapjes s\u00eb pikave hyr\u00ebse dhe dal\u00ebse nga funksionet, si dhe z\u00ebvend\u00ebsimi i trajtuesit n\u00eb ndonj\u00eb offset t\u00eb rast\u00ebsish\u00ebm n\u00eb kod. Bpftime mund t\u00eb lidhet me \u00e7do proces n\u00eb funksion n\u00eb sistem pa pasur nevoj\u00eb p\u00ebr rinstalim ose rikonstruksion. Z\u00ebvend\u00ebsimi i bpftime n\u00eb procese mund t\u00eb b\u00ebhet p\u00ebr proceset q\u00eb punojn\u00eb p\u00ebrmes ptrace, dhe p\u00ebr ata q\u00eb ngarkohen p\u00ebrmes LD_PRELOAD. <\/p>\n

N\u00eb p\u00ebrb\u00ebrjen e bpftime zhvillohet nj\u00eb runtime q\u00eb lejon lidhen programe eBPF me pikat e gjurmimit t\u00eb thirrjeve sistemore dhe uprobe; \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430<\/a> eBPF me JIT p\u00ebr ekzekutimin e ndar\u00eb t\u00eb programeve eBPF n\u00eb nivelin e procesit t\u00eb p\u00ebrdoruesit (p\u00ebr m\u00eb tep\u00ebr mb\u00ebshtetet kompilimi AOT); nj\u00eb proces n\u00eb sfond p\u00ebr nd\u00ebrveprimin me b\u00ebrtham\u00ebn dhe organizimin e kompatibilitetit me n\u00ebn-sistemin uprobe t\u00eb b\u00ebrtham\u00ebs (bpftime mb\u00ebshtet modalitetin e ngarkimit t\u00eb eBPF n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit nga b\u00ebrthama p\u00ebr t\u00eb organizuar bashk\u00ebpunimin me programet eBPF n\u00eb b\u00ebrtham\u00eb, t\u00eb p\u00ebrdorura, p\u00ebr shembull, p\u00ebr trajtimin e kprobe ose p\u00ebr vendosjen e filtrave rrjet\u00ebrore). <\/p>\n

Makin\u00eb virtuale eBPF \u00ebsht\u00eb formuar si nj\u00eb bibliotek\u00eb e lidhshme dhe ofron nj\u00eb API t\u00eb ngjash\u00ebm me ubpf, duke e b\u00ebr\u00eb at\u00eb t\u00eb mundshme p\u00ebr integrimin e funksionalitetit eBPF n\u00eb projekte t\u00eb tjera. P\u00ebr grumbullimin e t\u00eb dh\u00ebnave nga disa procese mb\u00ebshtetet krijimi i hartave eBPF t\u00eb p\u00ebrbashk\u00ebta, t\u00eb vendosura n\u00eb_memorie t\u00eb ndar\u00eb. S\u00eb bashku me bpftime, mund t\u00eb p\u00ebrdoren trajtues t\u00eb standardizuar eBPF t\u00eb shkruar p\u00ebr p\u00ebrdorim n\u00eb b\u00ebrtham\u00eb, dhe p\u00ebr nd\u00ebrtim mund t\u00eb p\u00ebrdoren mjete standarde t\u00eb bazuara n\u00eb clang dhe libbpf. <\/p>\n

Me bpftime n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit mund t\u00eb ekzekutohen sisteme gjurmimi si BCC, bpftrace dhe Deepflow. P\u00ebr shembull, \u00ebsht\u00eb demonstruar p\u00ebrdorimi i skenarit sslsniff nga frameworku BCC p\u00ebr analizimin dhe ruajtjen e trafikut t\u00eb enkriptuar n\u00eb nginx. N\u00eb testet e zhvilluara, performanca e nginx n\u00eb ekzekutimin e sslsniff n\u00eb an\u00ebn e b\u00ebrtham\u00ebs zvog\u00eblohet me 58%, nd\u00ebrsa kur trajtuesi \u00ebsht\u00eb zhvendosur n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit me 12.3%. <\/p>\n

Arqitektura e gjurmimit t\u00eb proceseve duke p\u00ebrdorur eBPF-original n\u00eb b\u00ebrtham\u00eb:

\"Projekti<\/center> <\/p>\n

Arqitektura e gjurmimit n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit duke p\u00ebrdorur bpftime:

\"Projekti<\/center> <\/p>\n

Rekordi hibrid, n\u00eb t\u00eb cilin bpftime punon s\u00eb bashku me eBPF n\u00eb b\u00ebrtham\u00eb, p\u00ebr shembull, p\u00ebr vendosjen e filtrave rrjet\u00ebrore ose p\u00ebr zhvendosjen e trajtuesve t\u00eb ve\u00e7ant\u00eb n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit:

\"Projekti<\/center> <\/p>\n

Nga planet p\u00ebr t\u00eb ardhmen, p\u00ebrmendet: mund\u00ebsia e z\u00ebvend\u00ebsimit t\u00eb p\u00ebrjashtimeve (Fault Injection); ngjitja e nxeht\u00eb e patch-eve (Hot Patching) p\u00ebr t\u00eb ndryshuar logjik\u00ebn e pun\u00ebs ose p\u00ebr t\u00eb korrigjuar gabimet n\u00eb nd\u00ebrtimet binar\u00eb; krijimi i nj\u00eb moduli p\u00ebr Nginx, q\u00eb lejon krijimin e zgjerimeve duke p\u00ebrdorur programe eBPF (p\u00ebr shembull, p\u00ebr zgjedhjen dinamike t\u00eb rrug\u00ebve, ruajtjen e caches, aplikimin e politikave t\u00eb siguris\u00eb dhe balancimin e ngarkes\u00ebs); zgjerimi i mund\u00ebsive t\u00eb n\u00ebn-sistemit FUSE (p\u00ebr shembull, krijimi n\u00eb form\u00ebn e programeve eBPF t\u00eb zgjerimeve p\u00ebr FS p\u00ebr ruajtjen e caches ose menaxhimin e qasjes).
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 bpftime, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 runtime \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 eBPF \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. Bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0446\u0435\u043b\u0438\u043a\u043e\u043c \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f eBPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u0438 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a uprobe \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043b\u0438\u0448\u043d\u0438\u0445 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0434\u0435\u0441\u044f\u0442\u0438\u043a\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u0432 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113050,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113049","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekti bpftime zhvillon zbatimin e eBPF q\u00eb funksionon n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit | ProHoster","description":"Projektin bpftime prezanton nj\u00eb runtime dhe nj\u00eb makin\u00eb virtuale p\u00ebr ekzekutimin e trajtuesve eBPF n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit. Bpftime lejon ekzekutimin e plot\u00eb t\u00eb programeve eBPF p\u00ebr gjurmimin dhe nd\u00ebrhyrjen n\u00eb proceset, duke p\u00ebrdorur mund\u00ebsi t\u00eb tilla si uprobe dhe interceptimin programatik t\u00eb thirrjeve sistemike. Vlen t\u00eb theksohet se, duke eliminuar k\u00ebmbimet e panevojshme t\u00eb kontekstit, bpftime arrin nj\u00eb reduktim dhjet\u00ebfish t\u00eb kostos krahasuar me","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 bpftime \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e eBPF, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0443\u044e \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 bpftime, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 runtime \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 eBPF \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. Bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0446\u0435\u043b\u0438\u043a\u043e\u043c \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f eBPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0442\u0440\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u0438 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a uprobe \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043b\u0438\u0448\u043d\u0438\u0445 \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 bpftime \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0434\u0435\u0441\u044f\u0442\u0438\u043a\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0445 \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u0432 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/proekt-bpftime-razvivaet-realizacziyu-ebpf-rabotayushhuyu-v-prostranstve-polzovatelya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-22T15:28:04+00:00","article:modified_time":"2024-01-22T15:28:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/113049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=113049"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/113049\/revisions"}],"predecessor-version":[{"id":164070,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/113049\/revisions\/164070"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/113050"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=113049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=113049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=113049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}