cramped engine room, Its critical systems of metal and fire. eBPF originates from Linux, an operating system that runs on billions of devices around the world and is divided into user space (where most applications entire system and is highly performant, but needs to provide a stable interface to applications, so it lacks the flexibility of user space programming. Applications User space Kernel System calls constant adjustments to adapt to the evolution of the kernel. Applications User space Kernel System calls Files Networking Process Module Memory One day, a concerned Captain Tux reviewed the crew

with Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administra�on System Requirements Summary Linux Distribu�on Compa�bility Matrix Linux Kernel Key-Value store clang+LLVM ability to gain visibility and to troubleshoot issues is fundamental to the opera�on of any distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special run Cilium inside microk8s, a GNU/Linux distribu�on with kernel 4.9 or later is required (per the System Requirements). Install microk8s Install microk8s >= 1.14 as per microk8s documenta�on: MicroK8s

Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel Advanced Features and to gain visibility and to troubleshoot issues is fundamental to the operation of any distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch NAME READY STATUS RESTARTS

Docker & libnetwork Mesos Cilium with Mesos/Marathon Envoy Envoy Go Extensions Administration System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel Advanced Features and to gain visibility and to troubleshoot issues is fundamental to the operation of any distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch NAME READY STATUS RESTARTS

(Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility & Considerations Linux Kernel Required Kernel to gain visibility and to troubleshoot issues is fundamental to the operation of any distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place -plugins/#network- plugin-requirements]) Linux kernel >= 4.9.17 Tip See System Requirements for more details on the system requirements. Install Cilium Install Cilium into the Kubernetes cluster pointed

(Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Architecture Support Linux Distribution Compatibility & Considerations Linux to gain visibility and to troubleshoot issues is fundamental to the operation of any distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place -plugins/#network- plugin-requirements]) Linux kernel >= 4.9.17 Tip See System Requirements for more details on the system requirements. Install Cilium Install Cilium into the Kubernetes cluster pointed

Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel Required Kernel Versions to gain visibility and to troubleshoot issues is fundamental to the operation of any distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place parameter in minikube start command. With this flag enabled, minikube will not only mount eBPF file system but also deploy quick- install.yaml automatically. 4. Mount the eBPF filesystem minikube ssh --

(Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility Matrix Linux Kernel Required Kernel Versions to gain visibility and to troubleshoot issues is fundamental to the operation of any distributed system. While we learned to love tools like tcpdump and ping and while they will always find a special place parameter in minikube start command. With this flag enabled, minikube will not only mount eBPF file system but also deploy quick- install.yaml automatically. However, this may not install the latest version

nux-next.git /source/linux cd linux mkdir build make O=$PWD/build ARCH=x86_64 x86_64_defconfig make O=$PWD/build ARCH=x86_64 menuconfig make O=$PWD/build ARCH=x86_64 -j16 Kernel image Remember to: as filesystem image - Enable networking - Enable the SSH daemon cd /source/linux qemu-system-x86_64 -kernel build/arch/x86/boot/bzImage \ --enable-kvm \ -nic user,hostfwd=tcp::2222-:22 \ -boot c -m 2049M 115200 acpi=off nokaslr" \ -serial stdio -display none Start the test VM cd /source/linux gdb build/vmlinux (gdb) target remote localhost:1234 (gdb) bpf/syscall.c:4180 (gdb) bpf/syscall.c:796 (gdb)

limit the number of consumers • But adding such a feature in RabbitMQ could be a long process… Build a Limiter in BPF • Let’s use BPF to get a quick win! • Track how many “AMQP consumers” have been both in-kernel and user- space programs - benefits from LLVM integration • Rust: expressive type system, modern toolchain - but most importantly, I love Rust! • For networking, RedBPF supports XDP