Download - Cilium - BPF & XDP for containers
Transcript
![Page 1: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/1.jpg)
![Page 2: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/2.jpg)
○○○○○
![Page 3: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/3.jpg)
![Page 4: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/4.jpg)
![Page 5: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/5.jpg)
●○○
⇒
⇒
●
●
![Page 6: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/6.jpg)
●○○
●○
●○
![Page 7: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/7.jpg)
●●
○○
Frontend BackendLB
FE BELB
LBFE
FE BE
LB
![Page 8: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/8.jpg)
●●
○○
Frontend BackendLB
FE BELB
LBFE
FE BE
LB
Prod
Frontend BackendLB
FE BELBQA
Prod
QA
Prodrequires
requires QA
QA
![Page 9: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/9.jpg)
●○
FE
BE
LB Prod
QA
Prod
Prod
FE
BE
LB
QA
QA
10111213141516
Cluster Wide Label ID Table: This ID is carried in the network packet and used to reconstruct the label context at the receiving host.
Policy enforcement cost is reduced to a single hashtable lookup regardless of complexity.
![Page 10: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/10.jpg)
●○
●○○
●
![Page 11: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/11.jpg)
●●●
FE
BE
LB
LBECMP
FE
FE
BE
BE
BE
Small HTTP GET
Ultra HD Cat Pictures/Videos
![Page 12: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/12.jpg)
Intel Xeon 3.5Ghz Sandy Bridge, 24 cores, 1 TCP flow per core, netperf -t TCP_SENDFILE, 10’000 policies
![Page 13: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/13.jpg)
![Page 15: Cilium - BPF & XDP for containers](https://reader034.vdocuments.mx/reader034/viewer/2022042510/586e8c061a28aba0038b82c3/html5/thumbnails/15.jpg)
●●●
●●●
●●●●●●●