eBPF at LINE’s Private Cloud Yutaro Hayakawa October 28, 2020 • Messaging & many family services • 185 million global MAU • 3Tbps+ network traffic in total LINE Verda: LINE’s Private Cloud Service com/watch?v=UE6rPA1Js2s&fe ature=emb_title • https://speakerdeck.com/line_devday2019/software- engineering-that-supports-line-original-lbaas ipftrace // Trace the TCP packets with destination 10.0 VRF For More Information • Our SRv6 DC network architecture (en) • https://speakerdeck.com/line_developers/line-data-center- networking-with-srv6 • Detailed investigation of SRv6 TSO/GSO issue (jp) •

http://localhost:12000/ to access the UI. Hubble UI is not the only way to get access to Hubble data. A command line tool, the Hubble CLI, is also available. It can be installed by following the instructions below: http://localhost:12000/ to access the UI. Hubble UI is not the only way to get access to Hubble data. A command line tool, the Hubble CLI, is also available. It can be installed by following the instructions below: http://localhost:12000/ to access the UI. Hubble UI is not the only way to get access to Hubble data. A command line tool, the Hubble CLI, is also available. It can be installed by following the instructions below:

addrgenmode eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535 4. The veth keyword on line 3 indicates that the network device type is virtual ethernet. If the CNI plugin you are chaining subset of DNS domains Combining DNS, port and L7 rules for restricting access to external service In line with our Star Wars theme examples, we will use a simple scenario where the empire’s mediabot pods (most recent call last): File "/cloudcity/cc_door_client.py", line 71, in run() File "/cloudcity/cc_door_client.py", line 53, in run door_id=int(arg2), access_code=int(arg3))) File

eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535 4. The veth keyword on line 3 indicates that the network device type is virtual ethernet. If the CNI plugin you are chaining subset of DNS domains Combining DNS, port and L7 rules for restricting access to external service In line with our Star Wars theme examples, we will use a simple scenario where the Empire’s mediabot pods (most recent call last): File "/cloudcity/cc_door_client.py", line 71, in run() File "/cloudcity/cc_door_client.py", line 53, in run door_id=int(arg2), access_code=int(arg3))) File

eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535 4. The veth keyword on line 3 indicates that the network device type is virtual ethernet. If the CNI plugin you are chaining subset of DNS domains Combining DNS, port and L7 rules for restricting access to external service In line with our Star Wars theme examples, we will use a simple scenario where the Empire’s mediabot pods (most recent call last): File "/cloudcity/cc_door_client.py", line 71, in run() File "/cloudcity/cc_door_client.py", line 53, in run door_id=int(arg2), access_code=int(arg3))) File

referring to the key loca�ons like this: # In case you want to use TLS in etcd, uncomment the 'ca-file' line # and create a kubernetes secret by following the tutorial in # https://cilium.link/etcd-config subset of DNS domains Combining DNS, port and L7 rules for restric�ng access to external service In line with our Star Wars theme examples, we will use a simple scenario where the empire’s mediabot pods (most recent call last): File "/cloudcity/cc_door_client.py", line 71, in run() File "/cloudcity/cc_door_client.py", line 53, in run door_id=int(arg2), access_code=int(arg3))) File

addrgenmode eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535 4. The veth keyword on line 3 indicates that the network device type is virtual ethernet. If the CNI plugin you are chaining subset of DNS domains Combining DNS, port and L7 rules for restricting access to external service In line with our Star Wars theme examples, we will use a simple scenario where the empire’s mediabot pods (most recent call last): File "/cloudcity/cc_door_client.py", line 71, in run() File "/cloudcity/cc_door_client.py", line 53, in run door_id=int(arg2), access_code=int(arg3))) File

addrgenmode eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535 4. The veth keyword on line 3 indicates that the network device type is virtual ethernet. If the CNI plugin you are chaining subset of DNS domains Combining DNS, port and L7 rules for restricting access to external service In line with our Star Wars theme examples, we will use a simple scenario where the empire’s mediabot pods (most recent call last): File "/cloudcity/cc_door_client.py", line 71, in run() File "/cloudcity/cc_door_client.py", line 53, in run door_id=int(arg2), access_code=int(arg3))) File