eBPF at LINE’s Private Cloud Yutaro Hayakawa October 28, 2020 • Messaging & many family services • 185 million global MAU • 3Tbps+ network traffic in total LINE Verda: LINE’s Private Cloud Service PaaS FaaS … Verda and XDP Based L4 Load Balancer Service • Part of our private cloud service since 2017 • 5100 private, 760 public VIPs • k8s CCM integration (Type: LoadBalancer) L4LB Node L4LB gso_type: tcpv4) Functions the packets have gone through CPU ID Time Stamp User defined tracing data (with Lua script) … Use case • Multi tenant HV networking using SRv6 + VRF • Contributed to find

from the Data Deluge? A case for file filtering in eBPF Giulia Frascaria October 28, 2020 1 The data deluge on modern storage 2 Compute node CPU Network Storage node Flash The data deluge on CPU Network Storage node Flash Data DoS in reverse! 11 Compute node CPU Network Storage node Flash Data So similar yet so different ● DoS is malicious ● Data transfer is business-critical ● We 12 So similar yet so different ● DoS is malicious ● Data transfer is business-critical ● We can blindly drop DoS 13 But could we reduce data transfer size? eBPF filter-reduce 14 Filter Reduce input

internet. Ubuntu Server brings economic and technical scalability to your datacentre, public or private. Whether you want to deploy an OpenStack cloud, a Kubernetes cluster or a 50,000-node render farm gigabytes Perform a system back up Before installing Ubuntu Server Edition you should make sure all data on the system is backed up. If this is not the first time an operating system has been installed storage configuration screen will install Ubuntu onto the selected disk, replacing any partitions or data already there. You can choose whether or not to set up LVM, and if you do, whether or not to encrypt

........................................................................................... 55 5. Data Plane Development Kit ........................................................................... options available. 1.3. Backing Up • Before installing Ubuntu Server Edition you should make sure all data on the system is backed up. See Chapter 19, Backups [p. 323] for backup options. If this is not the installation progress will begin. It will not be possible to move back to this or previous screens and any data on the disks you have configured the installer to use will be lost. 4 http://www.ubuntu.com/down

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 537 10.35 Apache Module mod data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 540 10.36 Apache Module loaded, it will now set some default timeouts. • MOD DUMPIO: DUMPIOLOGLEVEL is no longer supported. Data is always logged at LOGLEVEL trace7. 1.1. UPGRADING TO 2.4 FROM 2.2 5 • On Unix platforms, piped now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. • Multi-language error documents from 2.2.x may not work unless they are adjusted

loaded, it will now set some default timeouts. mod_dumpio: DumpIOLogLevel is no longer supported. Data is always logged at LogLevel trace7. On Unix platforms, piped logging commands configured using either now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. Multi-language error documents from 2.2.x may not work unless they are adjusted mod_buffer Provides for buffering the input and output filter stacks mod_data Convert response body into an RFC2397 data URL mod_ratelimit Provides Bandwidth Rate Limiting for Clients mod_request

loaded, it will now set some default timeouts. mod_dumpio: DumpIOLogLevel is no longer supported. Data is always logged at LogLevel trace7. On Unix platforms, piped logging commands configured using either now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. Multi-language error documents from 2.2.x may not work unless they are adjusted mod_buffer Provides for buffering the input and output filter stacks mod_data Convert response body into an RFC2397 data URL mod_ratelimit Provides Bandwidth Rate Limiting for Clients mod_request

loaded, it will now set some default timeouts. mod_dumpio: DumpIOLogLevel is no longer supported. Data is always logged at LogLevel trace7. On Unix platforms, piped logging commands configured using either now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. Multi-language error documents from 2.2.x may not work unless they are adjusted mod_buffer Provides for buffering the input and output filter stacks mod_data Convert response body into an RFC2397 data URL mod_ratelimit Provides Bandwidth Rate Limiting for Clients mod_request

loaded, it will now set some default timeouts. mod_dumpio: DumpIOLogLevel is no longer supported. Data is always logged at LogLevel trace7. On Unix platforms, piped logging commands configured using either now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. Multi-language error documents from 2.2.x may not work unless they are adjusted mod_buffer Provides for buffering the input and output filter stacks mod_data Convert response body into an RFC2397 data URL mod_ratelimit Provides Bandwidth Rate Limiting for Clients mod_request

loaded, it will now set some default timeouts. mod_dumpio: DumpIOLogLevel is no longer supported. Data is always logged at LogLevel trace7. On Unix platforms, piped logging commands configured using either now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. Multi-language error documents from 2.2.x may not work unless they are adjusted mod_buffer Provides for buffering the input and output filter stacks mod_data Convert response body into an RFC2397 data URL mod_ratelimit Provides Bandwidth Rate Limiting for Clients mod_request