Traffic filtering at scale on Linux

Comments, chapters, ... Slides Search
Loading Click here to add:
Subscribe to notifications

When subscribed to notifications, an email will be sent to you for all added annotations.

Your user account has no email address.

Information on this media

121 views

WARNING: the introduction part is missing from the recording, we are sorry for that.

BPF programs are widely known for packet filtering in libpcap (the underlying capture library used by tcpdump and wireshark). One can also use them for performance analysis (perf uses BPF programs), but also for security purposes (seccomp uses BPF as well).

In this talk, we focus on networking and dive into BPF bytecode. First, we will have a look on the available toolchains and API. Then we will jump into actual BPF programs and figure how eBPF can be leveraged to perform traffic filtering using several mechanism amongst socket filtering API, iptables and tc. Finally, we will scratch the surface of XDP capabilities. 

François Serman 
François filters large numbers of packets and automate things at OVH.

Creation date: July 3, 2018
Speakers: François Serman
License: CC BY-SA v4
Links:

Other media in the channel "2018"