Enabling BPF Runtime policies for better BPF management
Enabling BPF Runtime policies for better BPF management
复制标题
启用 BPF 运行时策略以更好地管理 BPF
DOI：
10.1145/3609021.3609297
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
Williams, Dan
中科院分区：
文献类型：
--
作者：
Sahu, Raj;Williams, Dan
随着eBPF在生产环境中的可观察性、性能、故障排除和安全性方面越来越受欢迎，围绕如何管理安装到内核中的大量BPF程序的问题正在出现。分布式系统的操作员已经开始使用BPF编排框架，他们可以使用该框架来设置加载和访问策略，以便谁可以加载BPF程序并访问其结果数据。然而，除了最终终止的保证之外，运营商目前对BPF程序的运行时特性几乎没有可见性，因此无法设置策略来确保他们的系统在使用BPF程序时仍然满足关键的性能目标。在本文中，我们提出，有一个运行时的估计将使更好的政策，将管理允许的延迟在关键路径。我们的关键见解是利用验证器中的现有架构来静态跟踪所有可能分支的运行时成本。沿着动态确定的运行时估计的帮助函数和基于循环的助手的控制流的影响的知识，我们生成一个准确的-虽然广泛的-范围估计，使运行时的政策决定。我们进一步讨论了这种方法的一些局限性，特别是在广泛的估计范围以及BPF运行时管理的补充工具的情况下。
As eBPF increasingly and rapidly gains popularity for observability, performance, troubleshooting, and security in production environments, a problem is emerging around how to manage the multitude of BPF programs installed into the kernel. Operators of distributed systems are already beginning to use BPF-orchestration frameworks with which they can set load and access policies for who can load BPF programs and access their resultant data. However, other than a guarantee of eventual termination, operators currently have little to no visibility into the runtime characteristics of BPF programs and thus cannot set policies that ensure their systems still meet crucial performance targets when instrumented with BPF programs. In this paper, we propose that having a runtime estimate will enable better policies that will govern the allowed latency in critical paths. Our key insight is to leverage the existing architecture within the verifier to statically track the runtime cost of all possible branches. Along with dynamically determined runtime estimates for helper functions and knowledge of loop-based helpers' effects on control flow, we generate an accurate---although broad---range estimate for making runtime policy decisions. We further discuss some of the limitations of this approach, particularly in the case of broad estimate ranges as well as complementary tools for BPF runtime management.
登录
查看更多内容
DOI：
10.1145/3364452.3364455
发表时间：
2019-12
期刊：
ACM SIGSOFT Software Engineering Notes
影响因子：
--
作者：
X. Le;C. Păsăreanu;Rohan Padhye;David Lo;W. Visser;Koushik Sen
通讯作者：
X. Le;C. Păsăreanu;Rohan Padhye;David Lo;W. Visser;Koushik Sen
DOI：
10.1145/3387514.3405868
发表时间：
2020-07
期刊：
Proceedings of the Annual conference of the ACM Special Interest Group on Data Communication on the applications, technologies, architectures, and protocols for computer communication
影响因子：
--
作者：
Antonis Manousis;R. Sharma;Vyas Sekar;Justine Sherry
通讯作者：
Antonis Manousis;R. Sharma;Vyas Sekar;Justine Sherry
基于测量的最坏情况执行时间分析
DOI：
10.1109/seus.2005.12
发表时间：
2005
期刊：
Third IEEE Workshop on Software Technologies for Future Embedded and Ubiquitous Systems (SEUS'05)
影响因子：
--
作者：
I. Wenzel;R. Kirner;Bernhard Rieder;P. Puschner
通讯作者：
P. Puschner
TimeWeaver：混合最坏情况执行时间分析工具
DOI：
10.4230/oasics.wcet.2019.1
发表时间：
2019
期刊：
Proceedings of the Annual conference of the ACM Special Interest Group on Data Communication on the applications, technologies, architectures, and protocols for computer communication
影响因子：
--
作者：
Daniel Kästner;Markus Pister;Simon Wegener;C. Ferdinand
通讯作者：
C. Ferdinand
RTEMS实时操作系统最坏情况执行时间分析
DOI：
10.1109/emrts.2001.934029
发表时间：
2001
期刊：
Proceedings 13th Euromicro Conference on Real-Time Systems
影响因子：
--
作者：
Antoine Colin;I. Puaut
通讯作者：
I. Puaut