from the Data Deluge? A case for file filtering in eBPF Giulia Frascaria October 28, 2020 1 The data deluge on modern storage 2 Compute node CPU Network Storage node Flash The data deluge on CPU Network Storage node Flash Data DoS in reverse! 11 Compute node CPU Network Storage node Flash Data So similar yet so different ● DoS is malicious ● Data transfer is business-critical ● We 12 So similar yet so different ● DoS is malicious ● Data transfer is business-critical ● We can blindly drop DoS 13 But could we reduce data transfer size? eBPF filter-reduce 14 Filter Reduce input

such as OpenHarmony, achieving ecosystem interoperability through shared capabilities. With a unified OS architecture supporting all mainstream computing architectures, openEuler is one of the best Information Technology Technology Communication 10,000 + mainstream applications on cloud native, big data CND, MEC, industrial control,etc. Integrated ecosystems and extensive compatibility through distributed maintenance status. Software Package Repositories EPOL Image EUR/oepkgs/... Desktop/SDS/ DB/Big data/... kernel/glibc/ system/GCC/... Core/Base package repository Software package repository of the

partners, users, and developers who plan to enhance scenario-specific capabilities. By creating a unified OS that supports multiple devices, openEuler hopes to enable a single application development for is built on the latest trends of interconnect buses and storage media, and offers a distributed, real-time acceleration engine and base services. It provides competitive advantages in edge and embedded deployments of online and offline cloud services. Its innovative CPU scheduling algorithm ensures real-time CPU preemption and jitter suppression for online services. Additionally, its innovative memory

ecosystem. openEuler is an innovative platform driven by community collaboration. It aims to build a unified and open OS that supports multiple processor architectures, and to advance the hardware and software In-depth optimizations for scheduling, I/O, and memory management • Tiered memory expansion etMem: unified management of various memory and storage media, and smooth expansion of system capacity • Live packets: It breaks the limitation of the TCP framework. This model adds an EDT timestamp to each data packet based on the scheduling policy, avoiding the delays caused by large queue buffers and bringing

.............................................................................. 50 Monitoring the Data Usage ........................................................................................... using the following settings. Serial Console Port Settings Baudrate 115200 bps Parity None Data bits 8 Stop bits 1 Flow Control None Terminal VT100 Below we show how to use the terminal Moxa Industrial Linux 3.0 (Debian 11) Manual for Arm-based Computers 20 Using LAN2 to download data. Do you want to change the ip address? 0 - No, 1 - Yes(0-1, Enter to abort):1 Local IP Address

expressions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 1.6.5 Extracting data from text file table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 2.4.4 Searching on the package meta data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 2.5 Debian package management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 2.5.1 Archive meta data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 2

容器粒度支持全范围去重：在 memory cgroup v1 目录下新增容器粒度的开关 memory.ksm，写 1 后该容器内所 有进程都使能 KSM 全地址范围内存去重。 • Damon（Data Access MONitoring）特性增强：Damon 可在轻度内存压力下，实现主动、轻量级的线上内存访问监 控及回收，用户根据监控结果定制策略对内存区域做相应操作。 • uswap 特性 l TEE 远程证明 提供鲲鹏平台的远程证明服务、证明报告校验，可供用户直接部署使用。 场景 开发 框架 SDK 硬件 secGear Unified Framework Component & Service SDK Unified API SGX SDK Intel SGX 鲲鹏Trustzone 华为云 擎天Enclave TEEOS SDK Qingtian SDK Qingtian SGX iTrustee Qingtian 数据拥有方 APP 用户CA 用户TA REE TEE data data 安全通道客户端 3.传输加密数据 1.建立安全通道 En{data} En{data} 安全通道 host En{data} 安全通道enclave 4.解密 2.加密 数据处理方 安全通道 数据拥有者在请求云上机密计算服务 时，需要把待处理数据上传到云上

. . . . . . . . 235 11.6.1 Graphic data tools (metapackage) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235 11.6.2 Graphic data tools (GUI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236 11.6.3 Graphic data tools (CLI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236 11.7 Verschiedene . . . 234 11.17List of graphics data tools (metapackage) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235 11.18List of graphics data tools (GUI) . . . . . . . . . . .

Agent Network Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Cilium Hubble Important common packages Debugging toFQDNs and DNS Debugging Mutexes / Locks and Data Races Hubble Bumping the vendored Cilium dependency Documentation Style Header Titles Body Code failing? Is it DNS? Is it an application or network problem? Is the communication broken on layer 4 (TCP) or layer 7 (HTTP)? Which services have experienced a DNS resolution problem in the last 5 minutes

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 2.6.2 Caching errors of the package data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 2.6.3 Incompatibilidade . . . . . . . . . . . . . . . . . . . . . . . . . . 151 9.3.4 Amostragem personalizada de hora e data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151 9.3.5 Echo de shell colorido . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222 11.2.4 The XML data lint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223