BPF: Next Generation of Programmable Datapath

•

8 j'aime•2,998 vues

This session covers lessons learned while exploring BPF to provide a programmable datapath based on BPF and discusses options for OVS to leverage the technology.

Logiciels

Next Generation of
Programmable Datapath
OVS Conference, San Jose, 2016
Thomas Graf

OVS Orbit podcast (May 16)
Not subscribed yet? ovsorbit.org

BPF Helpers: Interacting with the outside world
- Map Lookup/Update/Delete
- Get ktime
- printk to trace buffer
- Get random number
- Get SMP processor ID
- Load/store n bytes in skb data
- Replace L3/L4 checksum of skb
- Name/UID/GID of current process
- Push/pop VLAN header
- Set/get tunnel key and options
- Tail call
- Read/write perf event ring buffer
- Redirect/clone to other net_device
- Get routing realm
- Calculate checksum diff over memory
buffer
- Change protocol of skb
- Change type of skb (local/broadcast/…)
- Check for cgroup membership
- Access skb->hash or mark invalid
- Trim tail of skb
- Make skb linear

Experimenting with BPF
● Apply BPF to container networking & security
● Generate individual bytecode for each container at startup
○ Incredible flexibility and versatility
○ Majority of configuration becomes constant
● Decouple code (bytecode) and state (maps)
○ Allow for regeneration at any time without breaking
connections

Intel Xeon 3.5Ghz Sandy Bridge, 24 cores,
1 TCP flow per core, netperf -t TCP_SENDFILE, 10’000 policies

Learned Lessons
● Datapath development on steroids.
● Verifier complexity limit requires to split programs into
multiple blocks that inherit state.
● We have probably not added the last helper yet.
● Helper requirements define minimal kernel version, so it’s
pretty much kernel 4.8+ for anything non trivial.

Q&A
Remember to get your BPF stickers!
E-Mail: Twitter
tgraf@tgraf.ch @tgraf__

Contenu connexe

Tendances

As containers are being deployed as part of multi tenant clusters, virtual multi layer switches become essential to interconnect containers while providing isolation guarantees. Assigning tenants their own private networks requires stateful network address translation (NAT) implemented in a scalable architecture to expose containers to public networks. Existing virtual switches integrated into the Linux kernel did not support stateful NAT so far. This presentation introduces a new virtual NAT service deployable as container built using existing kernel functionality such as network namespaces, routing rules and Netfilter to provide NAT services to existing virtual switches such as Open vSwitch and the Linux bridge but also the core L3 layer of Linux.

LinuxCon 2015 Stateful NAT with OVS

Thomas Graf

This talk will start with a deep dive and hands on examples of BPF, possibly the most promising low level technology to address challenges in application and network security, tracing, and visibility. We will discuss how BPF evolved from a simple bytecode language to filter raw sockets for tcpdump to the a JITable virtual machine capable of universally extending and instrumenting both the Linux kernel and user space applications. The introduction is followed by a concrete example of how the Cilium open source project applies BPF to solve networking, security, and load balancing for highly distributed applications. We will discuss and demonstrate how Cilium with the help of BPF can be combined with distributed system orchestration such as Docker to simplify security, operations, and troubleshooting of distributed applications.

DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP

Thomas Graf

Cilium is open source software for providing and transparently securing network connectivity and loadbalancing between application workloads such as application containers or processes. Cilium operates at Layer 3/4 to provide traditional networking and security services as well as Layer 7 to protect and secure use of modern application protocols such as HTTP, gRPC and Kafka. Cilium is integrated into common orchestration frameworks such as Kubernetes and Mesos.

Cilium - API-aware Networking and Security for Containers based on BPF

Thomas Graf

The Linux kernel is undergoing the most fundamental architecture evolution in history and is becoming a microkernel. Why is the Linux kernel evolving into a microkernel? The potentially biggest fundamental change ever happening to the Linux kernel. This talk covers how companies like Facebook and Google use BPF to patch 0-day exploits, how BPF will change the way features are added to the kernel forever, and how BPF is introducing a new type of application deployment method for the Linux kernel.

eBPF - Rethinking the Linux Kernel

Thomas Graf

Berkeley Packet Filter is an old friend for most people that deal with network under Linux. But its extended version eBPF is completely redefining the scope of usage and interaction with the kernel. It can indeed be used to instrument most parts of the kernel. This goes from network tracing to process or I/O monitoring. This talk will provide an overview of eBPF, from concept to tools like BCC. It will then focus on XDP for eXtreme Data Path and the possible applications in term of networking provided by this new framework. Eric Leblond, Stamus Network

Kernel Recipes 2017 - EBPF and XDP - Eric Leblond

Anne Nicolas

Cilium - BPF & XDP for containers

Docker, Inc.

netfilter is a framework provided by the Linux kernel that allows various networking-related operations to be implemented in the form of customized handlers. iptables is a user-space application program that allows a system administrator to configure the tables provided by the Linux kernel firewall (implemented as different netfilter modules) and the chains and rules it stores. Many systems use iptables/netfilter, Linux's native packet filtering/mangling framework since Linux 2.4, be it home routers or sophisticated cloud network stacks. In this session, we will talk about the netfilter framework and its facilities, explain how basic filtering and mangling use-cases are implemented using iptables, and introduce some less common but powerful extensions of iptables. Shmulik Ladkani, Chief Architect at Nsof Networks. Long time network veteran and kernel geek. Shmulik started his career at Jungo (acquired by NDS/Cisco) implementing residential gateway software, focusing on embedded Linux, Linux kernel, networking and hardware/software integration. Some billions of forwarded packets later, Shmulik left his position as Jungo's lead architect and joined Ravello Systems (acquired by Oracle) as tech lead, developing a virtual data center as a cloud-based service, focusing around virtualization systems, network virtualization and SDN. Recently he co-founded Nsof Networks, where he's been busy architecting network infrastructure as a cloud-based service, gazing at internet routes in astonishment, and playing the chkuku.

netfilter and iptables

Kernel TLV

Linux offers an extensive selection of programmable and configurable networking components from traditional bridges, encryption, to container optimized layer 2/3 devices, link aggregation, tunneling, several classification and filtering languages all the way up to full SDN components. This talk will provide an overview of many Linux networking components covering the Linux bridge, IPVLAN, MACVLAN, MACVTAP, Bonding/Team, OVS, classification & queueing, tunnel types, hidden routing tricks, IPSec, VTI, VRF and many others.

Linux Networking Explained

Thomas Graf

BPF - All your packets belong to me

_xhr_

While XDP is less complex to offload than other forms of kernel functionality due to the fact that it sits at the bottom of the stack, there are a number of items that lead to complexity when dealing with XDP offload. This talk will explore some of the ideas around how to implement these concepts as well as share some of the results we have seen while implementing offload on a 32 bit architecture.

Comprehensive XDP Off‌load-handling the Edge Cases

Netronome

In this talk we discuss the mechanisms of utilizing the eBPF language to perform hardware accelerated network packet manipulation and filtering. P4 programs can be compiled into eBPF scripts for offload in the Linux kernel using the Traffic Classifier (TC) subsystem. We demonstrate how, using eBPF as an intermediate language, it has been possible to extend the TC to either Just In Time (JIT) compile eBPF code to x86 assembler for software offload or to IXP byte code for execution in a trusted hardware environment within the Netronome Agilio intelligent server adapter. We finish by encouraging the audience to experiment with their own eBPF applications within the TC hardware accelerated system. The TC kernel patches are available on the Linux Kernel Networking mailing list as a Request For Comment (RFC) contribution. Dinan Gunawardena, Director, Software Engineering, Netronome Dinan Gunawardena is a Software Director focusing on running the driver team at Netronome. Previously, Dinan founded a software startup and was a Senior Research Engineer within the Operating Systems and Networking Group at Microsoft Research for 12 years, shipping technology in several versions of Microsoft Windows and the Bing Search Engine. Dinan has received over 20 patents and is a Chartered Software Engineer. Dinan has a Masters in Computer Science from University of Cambridge and a M.B.A. from WBS. Jakub Kicinski, Software Engineering, Netronome Jakub Kicinski is a Software Engineer specializing in the Linux Kernel drivers for Netronome SmartNICs. Jakub has previously worked as an intern for Intel Corporation. Jakub is also a researcher with expertise in Linux kernel. Experience in application development on complex multi-CPU and FPGA platforms. He is interested in high-performance software exploiting hardware capabilities and is passionate about networking. Jakub has a Masters in Computer Science from Gdansk University of Technology.

P4, EPBF, and Linux TC Offload

Open-NFP

LF_OVS_17_OVN and Containers - An update.

LF_OpenvSwitch

DPDK KNI interface

Denys Haryachyy

LF_OVS_17_OVS/OVS-DPDK connection tracking for Mobile usecases

LF_OpenvSwitch

debugging openstack neutron /w openvswitch

어형 이

The n00bs guide to ovs dpdk

markdgray

Cilium is an open source project which provides networking, security and load balancing for application services that are deployed using Linux container technologies by using the native eBPF technology in the Linux kernel. In this presentation we talked about: - The evolution of the BPF filters and explained the advantages of eBPF Filters and its use cases today in Linux especially on how Cilium networking utilizes the eBPF Filters to secure the Kubernetes workload with increased performance when compared to legacy iptables. - How Cilium uses SOCKMAP for layer 7 policy enforcement - How Cilium integrates with Istio and handles L7 Network Policies with Envoy Proxies. - The new features since the last release such as running Kubernetes cluster without kube-proxy, providing clusterwide NetworkPolicies, providing fully distributed networking and security observability platform for cloud native workloads etc.

Replacing iptables with eBPF in Kubernetes with Cilium

Michal Rostecki

LF_OVS_17_OVS-DPDK Installation and Gotchas

LF_OpenvSwitch

TRex Realistic Traffic Generator - Stateless support

Hanoch Haim

OpenStack networking juno l3 h-a, dvr

Sim Janghoon

Tendances (20)

LinuxCon 2015 Stateful NAT with OVS

DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP

Cilium - API-aware Networking and Security for Containers based on BPF

eBPF - Rethinking the Linux Kernel

Kernel Recipes 2017 - EBPF and XDP - Eric Leblond

Cilium - BPF & XDP for containers

netfilter and iptables

Linux Networking Explained

BPF - All your packets belong to me

Comprehensive XDP Off‌load-handling the Edge Cases

P4, EPBF, and Linux TC Offload

LF_OVS_17_OVN and Containers - An update.

DPDK KNI interface

LF_OVS_17_OVS/OVS-DPDK connection tracking for Mobile usecases

debugging openstack neutron /w openvswitch

The n00bs guide to ovs dpdk

Replacing iptables with eBPF in Kubernetes with Cilium

LF_OVS_17_OVS-DPDK Installation and Gotchas

TRex Realistic Traffic Generator - Stateless support

OpenStack networking juno l3 h-a, dvr

Similaire à BPF: Next Generation of Programmable Datapath

Implementing BGP Flowspec at IP transit network

Pavel Odintsov

Packet crafting of2013

Shteryana Shopova

Spark Summit EU talk by Jim Dowling

Spark Summit

Model driven telemetry

Cisco Canada

Cisco Connect Toronto 2017 - Model-driven Telemetry

Cisco Canada

On-premise Spark as a Service with YARN

Jim Dowling

introduction to linux kernel tcp/ip ptocotol stack

monad bobo

Programmable data plane at terabit speeds

Barefoot Networks

Programmable Data Plane at Terabit Speeds

Barefoot Networks

Computer network (14)

NYversity

Implementing an IPv6 Enabled Environment for a Public Cloud Tenant

Shixiong Shang

8 Ways Network Engineers use Snabb (RIPE 77)

Igalia

Bgpcep odl summit 2015

Giles Heron

Herzlichen Glückwunsch! Sie dürfen ein Netzwerk mit mehr als 2 Routern administrieren. Dieser Vortrag erläutert, warum statisches Routing keine Lösung ist und schneller als einem lieb ist zum Problem werden kann. Als Einführung in dynamisches Routing und OSPF, erklärt dieser Vortrag wie sich Router gegenseitig finden, Routen austauschen, was eine Area ist und wie die Link-State Datenbank funktioniert. OSPF wird praktisch am Beispiel des Bird Internet Routing Daemons und in Zusammenspiel mit klassischen Herstellern gezeigt.

Dynamische Routingprotokolle Aufzucht und Pflege - OSPF

Maximilan Wilhelm

This webinar explains why PISA chips are inevitable, provides overview of machine architecture of such switches, presents a brief primer on the P4 language with sample programs for a variety of networks and demonstrates a powerful network diagnostics application implemented in P4. Programmability in SDNs is confined to the network control plane. The forwarding plane is still largely dictated by fixed-function switching chips. Our goal is to change that, and to allow programmers to define how packets are to be processed all the way down to the wire. This is made possible by a new generation of high-performance forwarding chips. At the high-end, PISA (Protocol-Independent Switch Architecture) chips promise multi-Tb/s of packet processing. At the mid- and low-end of the performance spectrum, CPUs, GPUs, FPGAs, and NPUs already offer great flexibility with performance of a few tens to hundreds of Gb/s. In addition to programmable forwarding chips, we also need a high-level language to dictate the forwarding behavior in a target independent fashion. "P4" (www.p4.org) is such a language. In P4, the programer declares how packets are to be processed, and a compiler generates a configuration for a PISA chip, or a programmable target in general. For example, the programmer might program the switch to be a top-of-rack switch, a firewall, or a load-balancer; and might add features to run automatic diagnostics and novel congestion control algorithms.

[Webinar Slides] Programming the Network Dataplane in P4

Open Networking Summits

FD.io - The Universal Dataplane

Open Networking Summit

隨著大數據的需求，資料的產生流動儲存處理已經越分越細。早期的 RDBMS 已經無法達到需求，而因此出現了 NoSQL 來解決更大資料量的問題。至於傳統的 Message Queue System 也漸漸無法達到大數據的需求，Apache Kafka 也試著解決 Message 在超大數據的需求。Kafka 可以視為新的 Message Queue Solution，或者更像 Activity Logging System，目標是達到快速、分散式、持續性、延展性等特色。為了這些特性，其中有許多設計上的巧思也值得去關注。所以在這次分享中，除了介紹 Kafka 功能以外，也會針對內部設計做更進一步的介紹。

Apache Kafka: A high-throughput distributed messaging system @ JCConf 2014

Chen-en Lu

OSPF is a routing protocol for Internet Protocol networks. It uses a link state routing algorithm and falls into the group of interior routing protocols, operating within a single autonomous system. Compared with RIP, OSPF can provide scalable network support and faster convergence times. OSPF is widely used in large networks such as ISP backbones and enterprise networks. Considering that in large organizations where the end-to-end access is a requirement, the current VPC model brings more complexity to management and hands-on configuration beside the overhead involved in the NAT address translations processing. This presentation will bring some possibles approaches to enable dynamic routing using the OSPF protocol for IPv4 and IPv6 and simplify the network administrator life safely and quickly.

Approaches to enable the OSPF protocol in Apache CloudStack

Marco Sinhoreli

CODEONTHEBEACH_Streaming Applications with Apache Pulsar https://www.codeonthebeach.com/schedule Deep Dive into Building Streaming Applications with Apache Pulsar - Timothy Spann In this session I will get you started with real-time cloud native streaming programming with Java, Golang, Python and Apache NiFi. I will start off with an introduction to Apache Pulsar and setting up your first easy standalone cluster in docker. We will then go into terms and architecture so you have an idea of what is going on with your events. I will then show you how to produce and consume messages to and from Pulsar topics. As well as using some of the command line and REST interfaces to monitor, manage and do CRUD on things like tenants, namespaces and topics. We will discuss Functions, Sinks, Sources, Pulsar SQL, Flink SQL and Spark SQL interfaces. We also discuss why you may want to add protocols such as MoP (MQTT), AoP (AMQP/RabbitMQ) or KoP (Kafka) to your cluster. We will also look at WebSockets as a producer and consumer. I will demonstrate a simple web page that sends and receives Pulsar messages with basic JavaScript. After this session you will be able to build simple real-time streaming and messaging applications with your chosen language or tool of your choice.

CODEONTHEBEACH_Streaming Applications with Apache Pulsar

Timothy Spann

Realizing Linux Containers (LXC)

Boden Russell

Similaire à BPF: Next Generation of Programmable Datapath (20)

Implementing BGP Flowspec at IP transit network

Packet crafting of2013

Spark Summit EU talk by Jim Dowling

Model driven telemetry

Cisco Connect Toronto 2017 - Model-driven Telemetry

On-premise Spark as a Service with YARN

introduction to linux kernel tcp/ip ptocotol stack

Programmable data plane at terabit speeds

Programmable Data Plane at Terabit Speeds

Computer network (14)

Implementing an IPv6 Enabled Environment for a Public Cloud Tenant

8 Ways Network Engineers use Snabb (RIPE 77)

Bgpcep odl summit 2015

Dynamische Routingprotokolle Aufzucht und Pflege - OSPF

[Webinar Slides] Programming the Network Dataplane in P4

FD.io - The Universal Dataplane

Apache Kafka: A high-throughput distributed messaging system @ JCConf 2014

Approaches to enable the OSPF protocol in Apache CloudStack

CODEONTHEBEACH_Streaming Applications with Apache Pulsar

Realizing Linux Containers (LXC)

Plus de Thomas Graf

BPF is one of the fastest emerging technologies of the Linux kernel. The talk provides an introduction to Cilium which brings the powers of BPF to Kubernetes and other orchestration systems to provide highly scalable and efficient networking, security and load balancing for containers and microservices. The talk will provide an introduction to the capabilities of Cilium today but also deep dives into the emerging roadmap involving networking at the socket layer and service mesh datapath capabilities to provide highly efficient connectivity between cloud native apps and sidecar proxies.

Cilium - Bringing the BPF Revolution to Kubernetes Networking and Security

Thomas Graf

This talk will provide an introduction to injection options of Envoy and then deep dive into ongoing Linux kernel work that enables injecting Envoy while introducing as little latency as possible. The servicemesh and the sidecar proxy model are on a steep trajectory to redefine many networking and security use cases. This talk explains and demos a new socket redirect Linux kernel technology that allows running Envoy with similar performance as if the sidecar was linked to the application using a UNIX domain socket. The talk will also give an outlook on how Envoy can use the recently merged kernel TLS functionality to gain access to the clear text payload transparently for end to end encrypted applications without requiring to decrypt and re-encrypt any data to further reduce the overhead and latency.

Accelerating Envoy and Istio with Cilium and the Linux Kernel

Thomas Graf

Cilium is open source software for providing and transparently securing network connectivity and loadbalancing between application containers and services deployed using Linux container management platforms like Docker and Kubernetes. A new Linux kernel technology called eBPF is at the foundation of Cilium, which enables the dynamic insertion of BPF bytecode into the Linux kernel. Cilium generates eBPF programs for each individual application container to provide networking, security, loadbalancing and visibility.

Cilium - Network security for microservices

Thomas Graf

Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology called BPF, which enables the dynamic insertion of powerful security visibility and control logic within Linux itself. Because BPF runs inside the Linux kernel itself, Cilium security policies can be applied and updated without any changes to the application code or container configuration.

Linux Native, HTTP Aware Network Security

Thomas Graf

This talk demonstrates that programmability and performance does not require user space networking, it can be achieved in the kernel by generating BPF programs and leveraging the existing kernel subsystems. We will demo an early prototype which provides fast IPv6 & IPv4 connectivity to containers, container labels based security policy with avg cost O(1), and debugging and monitoring based on the per-cpu perf ring buffer. We encourage a lively discussion on the approach taken and next steps.

Cilium - Container Networking with BPF & XDP

Thomas Graf

Cilium - BPF & XDP for containers

Thomas Graf

Open vSwitch (OVS) has long been a critical component of the Neutron's reference implementation, offering reliable and flexible virtual switching for cloud environments. Being an early adopter of the OVS technology, Neutron's reference implementation made some compromises to stay within the early, stable featureset OVS exposed. In particular, Security Groups (SG) have been so far implemented by leveraging hybrid Linux Bridging and IPTables, which come at a significant performance overhead. However, thanks to recent developments and ongoing improvements within the OVS community, we are now able to implement feature-complete security groups directly within OVS. In this talk we will summarize the existing Security Groups implementation in Neutron and compare its performance with the Open vSwitch-only approach. We hope this analysis will form the foundation of future improvements to the Neutron Open vSwitch reference design.

Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)

Thomas Graf

SDN & NFV Introduction - Open Source Data Center Networking

Thomas Graf

Plus de Thomas Graf (8)

Cilium - Bringing the BPF Revolution to Kubernetes Networking and Security

Accelerating Envoy and Istio with Cilium and the Linux Kernel

Cilium - Network security for microservices

Linux Native, HTTP Aware Network Security

Cilium - Container Networking with BPF & XDP

Cilium - BPF & XDP for containers

Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)

SDN & NFV Introduction - Open Source Data Center Networking

Dernier

At TECUNIQUE, we're a stable and steadily growing Indian software services company with over 14 years of industry experience. Specializing in offshore software development and quality assurance services, we've built a reputation for delivering unique and effective solutions to start-ups, software development companies, enterprises, and digital agencies. We pride ourselves on our commitment to excellence and innovation. By blending insightful business domain knowledge with exceptional technical prowess, we craft tailor-made solutions that meet the unique needs of our clients. Our dedicated teams are adept in specific technologies, ensuring seamless integration of skills and delivering reliable, scalable, and high-quality software solutions aligned with our clients' preferences. Bespoke Dedicated Teams: Crafted to meet your specific needs and technology preferences, our dedicated teams are committed to delivering top-notch software solutions. Offshore Software Development: Accelerate your software development and scale up quickly with our 12+ years of expertise in offshore development. Quality Assurance Services: Ensure the quality of your software products with our dedicated teams of experienced QA professionals. IT Staff Augmentation: Overcome skill gaps with our client-centric software team, offering staff augmentation services. Expert Software Services: Unlock our capabilities in custom software development, product development, and quality assurance. Mission and Vision: Our mission at TECUNIQUE is to be the catalyst for our clients' success in the dynamic domain of software development. Rooted in our core values of respect, authenticity, and responsibility, we strive to ease the software outsourcing experience, reducing both time and cost to market for our clients. We envision ourselves as the leading Indian software services company, renowned for our unwavering commitment to excellence and innovation. www.tecunique.com

TECUNIQUE: Success Stories: IT Service provider

mohitmore19

MarTech Trend 2024 Book : Marketing Technology Trends (2024 Edition) How Data...

Jittipong Loespradit

In the past six months, the AI landscape has undergone a massive transformation, ushering in a new era of productivity with the latest in Large Language Models (LLMs) and AI technology. This deep dive unlocks how to: Create CustomGPT Models: No coding needed to tailor AI for your unique projects. Integrate your own data, including PDFs and Excel sheets, making information handling a breeze. Plus, discover how to call your own actions/integrations for even more personalized utility. Navigate Advanced Prompting: Overcome AI's memory limits and utilize Retrieval-Augmented Generation for accessing your personalized data, streamlining how you interact with AI. Stay Ahead with AI Trends: Peek into the evolving world of LLMs, featuring newcomers like Google Gemini, Anthropic Claude, Open Sora, and Twitter Grok, and understand what their advancements mean for your productivity. Witness Real-Life Transformations: Through examples and prompt demonstrations, see firsthand how these AI strategies revolutionize routine tasks, from data analysis to content creation. Learn to leverage image output and input for advanced practical use cases, adding a new dimension to your productivity toolkit. No previous coding or AI experience is needed for this talk. Stay ahead in the fast-evolving world of work. Embrace the AI revolution and transform your workflow with advanced LLM techniques. Join us to ensure you're not left behind in the productivity race.

AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques

VictorSzoltysek

10 Trends Likely to Shape Enterprise Technology in 2024

Mind IT Systems

In the realm of real-time applications, Large Language Models (LLMs) have long dominated language-centric tasks, while tools like OpenCV have excelled in the visual domain. However, the future (maybe) lies in the fusion of LLMs and deep learning, giving birth to the revolutionary concept of Large Action Models (LAMs). Imagine a world where AI not only comprehends language but mimics human actions on technology interfaces. For example, the Rabbit r1 device presented at CES 2024, driven by an AI operating system and LAM, brings this vision to life. It executes complex commands, leveraging GUIs with unprecedented ease. In this presentation, join me on a journey as a software engineer tinkering with WebRTC, Janus, and LLM/LAMs. Together, we’ll evaluate the current state of these AI technologies, unraveling the potential they hold for shaping the future of real-time applications.

Unveiling the Tech Salsa of LAMs with Janus in Real-Time Applications

Alberto González Trastoy

Define the academic and professional writing..pdf

PearlKirahMaeRagusta1

%in kempton park+277-882-255-28 abortion pills for sale in kempton park

masabamasaba

Craft an AI & Machine Learning Pitch with our Editable Professional PowerPoint Template. Ignite your AI & Machine Learning pitch with our cutting-edge PowerPoint template tailored for the industry. Perfect for AI conferences, investor presentations, sales pitches to tech-focused companies, training sessions, and educational programs. - 20+ editable slides: Get a variety of options to choose from for your presentation. - Time-saving solution: Download, replace text/images with a few clicks. - User-friendly customization: Easy to use and personalize. - Modern and attractive design: Captivating visuals, sleek layout. - Tailored to your requirements: Fully alterable for customization. - Well-organized slides: Complete control over content. - Thematic specificity: Reflects healthcare industry with relevant graphics. - Showcase your business idea: Communicate value proposition effectively.

AI & Machine Learning Presentation Template

Presentation.STUDIO

(Vivek)Call Us, 8448380779,Call girls in Delhi NCr – We Offer best in class call girls. escort Service At Affordable Price At low Rate with Space Night 8000 We Are One Of The Oldest Escort and Call girls Agencies in Delhi. You Will Find That Our Female Escorts Are Full Of Fun, Sexy And They Would Love Enjoy Your Company. We Have A Fantastic Selection Of Escort Ladies Available For In-Calls As Well As Out-Calls. Our Escorts Are Not Only Beautiful But All Have Great Personalities Making Them The Perfect Companion For Any Occasion. In-Call:- You Can Come At Our Place in Delhi Our place Which Is Very Clean Hygienic 100% safe Accommodation. Out-Call:- You have To Come Pick The Girl From My Place We Are Also Provide Door Step Services (Delhi Ncr, Noida, Gurgaon, Faridabad, Ghaziabad Note:- Pic Collectors Time Passers Bargainers Stay Away As We Respect The Value For Your Money Time And Expect The Same From You Hygienic:- Full Ac room And Clean Rooms Available In Hotel 24 * 7 Hourly In Delhi NCR More Details, With WhatsApp Number, +91-8448380779

Sector 18, Noida Call girls :8448380779 Model Escorts | 100% verified

Delhi Call girls

%in Midrand+277-882-255-28 abortion pills for sale in midrand

masabamasaba

Chinsurah Escorts ☎️8617697112 Starting From 5K to 15K High Profile Escorts In Chinsurah ❤Personal Whatsapp Number Chinsurah Call Girls 8617697112 💦✅. Chinsurah escorts we are avaliable for our all types budget customers with offer great deals in Chinsurah.Call Now our Chinsurah escort service & call girls ... Independent call girls in Chinsurah escorts available 24 hours a day for discreet incall and outcall bookings from trusted call girls - Elis.in. Nitya salvi Chinsurah escorts service agency # Are you looking for sexy call girls ? Call our agency to get you dream independent call girl, ... One shot: ₹2000/in-call, ₹5000/out-call Two shots with one girl: ₹3500/in-call, ₹6000/out-call Body to body massage with sex: ₹3000/in-call Full night for one person: ₹7000/in-call, ₹10000/out-call Flexibility Choices and options Lists of many beauty fantasies Turn your dream into reality Perfect companionship Cheap and convenient In-call and Out-call services And many more. WhatsApp Chat: 📞 8617697112 Visit The Website : https://www.nityasalvi.com/

Chinsurah Escorts ☎️8617697112 Starting From 5K to 15K High Profile Escorts ...

Nitya salvi

A great deal of attention in medical devices has shifted towards cybersecurity with the ratification of section 524B of the FD&C act. This new law enables the FDA to enforce cybersecurity controls in any medical device that is capable of networked communications or that has software. In this webinar we will recap the process for managing vulnerabilities, identify categories of vulnerabilities and solutions and more.

The Real-World Challenges of Medical Device Cybersecurity- Mitigating Vulnera...

ICS

InShot proinshot.com stands tall among its peers as the ultimate video editing app, offering simplicity, versatility, and power in one package. With its intuitive interface and comprehensive feature set, InShot caters to both beginners and seasoned editors alike. Whether you're creating content for social media, YouTube, or personal projects, InShot empowers you to unleash your creativity and transform your videos into captivating masterpieces. Join the millions of users who trust InShot https://www.proinshot.com/ for all their video editing needs and discover the difference for yourself!

Exploring the Best Video Editing App.pdf

proinshot.com

How To Troubleshoot Collaboration Apps for the Modern Connected Worker

ThousandEyes

Many specialized tools cater to distinct stages within the software development lifecycle (SDLC). These tools target various aspects of development, delivery, and operations, each with its unique strengths. Uniting these diverse testing needs into a single continuous testing platform presents several challenges. Such a platform must seamlessly integrate with various development tools and environments, accommodate different testing methodologies, and remain flexible to adapt to organizational processes and quality standards.

The Guide to Integrating Generative AI into Unified Continuous Testing Platfo...

kalichargn70th171

%in ivory park+277-882-255-28 abortion pills for sale in ivory park

masabamasaba

LEVEL 5 - SESSION 1 2023 (1).pptx - PDF 123456

KiaraTiradoMicha

VTU technical seminar 8Th Sem on Scikit-learn

AmarnathKambale

In today's dynamic e-commerce landscape, the payment gateway emerges as a linchpin, ensuring smooth and secure transactions between buyers and sellers. In this discourse, we delve into the meticulous process of devising test cases tailored for scrutinizing payment gateways. Crafting precise test cases for payment gateways is a quintessential responsibility for testers operating within the service industry. This article meticulously explores pivotal scenarios integral to how to test payment gateways, coupled with essential guidelines for drafting effective test cases.

Payment Gateway Testing Simplified_ A Step-by-Step Guide for Beginners.pdf

kalichargn70th171

Azure Native Qumulo scales elastically for common High Performance Compute (HPC) workloads based on application requirements for: Financial Services, Automotive, Genomics / Life Sciences, Media and Entertainment, Energy, Oil and Gas, etc. Performance can be dialed UP (and back down) much higher than the examples shown here. These slides offer a glimpse into ANQ's HPC capabilities, although at a smaller scale. We invite YOU to do your own testing (with a free ANQ trial) and work with us to test your HPC workloads in Azure.

Azure_Native_Qumulo_High_Performance_Compute_Benchmarks.pdf

ryanfarris8

Dernier (20)

TECUNIQUE: Success Stories: IT Service provider

MarTech Trend 2024 Book : Marketing Technology Trends (2024 Edition) How Data...

AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques

10 Trends Likely to Shape Enterprise Technology in 2024

Unveiling the Tech Salsa of LAMs with Janus in Real-Time Applications

Define the academic and professional writing..pdf

%in kempton park+277-882-255-28 abortion pills for sale in kempton park

AI & Machine Learning Presentation Template

Sector 18, Noida Call girls :8448380779 Model Escorts | 100% verified

%in Midrand+277-882-255-28 abortion pills for sale in midrand

Chinsurah Escorts ☎️8617697112 Starting From 5K to 15K High Profile Escorts ...

The Real-World Challenges of Medical Device Cybersecurity- Mitigating Vulnera...

Exploring the Best Video Editing App.pdf

How To Troubleshoot Collaboration Apps for the Modern Connected Worker

The Guide to Integrating Generative AI into Unified Continuous Testing Platfo...

%in ivory park+277-882-255-28 abortion pills for sale in ivory park

LEVEL 5 - SESSION 1 2023 (1).pptx - PDF 123456

VTU technical seminar 8Th Sem on Scikit-learn

Payment Gateway Testing Simplified_ A Step-by-Step Guide for Beginners.pdf

Azure_Native_Qumulo_High_Performance_Compute_Benchmarks.pdf

BPF: Next Generation of Programmable Datapath

1. Next Generation of Programmable Datapath OVS Conference, San Jose, 2016 Thomas Graf

2. What happened in 2016 so far?

3. OVS 2.6 was released

4. First ever OVN release

5. OVS Orbit podcast (May 16) Not subscribed yet? ovsorbit.org

6. Docker followed (Aug 16)

7. What is up next?

8. Stickers Available!

10. Programs, Maps, Tail Calls

11. BPF Helpers: Interacting with the outside world - Map Lookup/Update/Delete - Get ktime - printk to trace buffer - Get random number - Get SMP processor ID - Load/store n bytes in skb data - Replace L3/L4 checksum of skb - Name/UID/GID of current process - Push/pop VLAN header - Set/get tunnel key and options - Tail call - Read/write perf event ring buffer - Redirect/clone to other net_device - Get routing realm - Calculate checksum diff over memory buffer - Change protocol of skb - Change type of skb (local/broadcast/…) - Check for cgroup membership - Access skb->hash or mark invalid - Trim tail of skb - Make skb linear

12. Experimenting with BPF ● Apply BPF to container networking & security ● Generate individual bytecode for each container at startup ○ Incredible flexibility and versatility ○ Majority of configuration becomes constant ● Decouple code (bytecode) and state (maps) ○ Allow for regeneration at any time without breaking connections

13. Cilium Architecture

14. Intel Xeon 3.5Ghz Sandy Bridge, 24 cores, 1 TCP flow per core, netperf -t TCP_SENDFILE, 10’000 policies

15. Learned Lessons ● Datapath development on steroids. ● Verifier complexity limit requires to split programs into multiple blocks that inherit state. ● We have probably not added the last helper yet. ● Helper requirements define minimal kernel version, so it’s pretty much kernel 4.8+ for anything non trivial.

16. Q&A Remember to get your BPF stickers! E-Mail: Twitter tgraf@tgraf.ch @tgraf__

BPF: Next Generation of Programmable Datapath

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à BPF: Next Generation of Programmable Datapath

Similaire à BPF: Next Generation of Programmable Datapath (20)

Plus de Thomas Graf

Plus de Thomas Graf (8)

Dernier

Dernier (20)

BPF: Next Generation of Programmable Datapath