networking

eBPF:Linux内核可观测性革命——从入门到生产级实战

深度解析 eBPF(Extended Berkeley Packet Filter)架构与实战:从核心组件(Verifier/JIT/BPF Maps)、程序类型(Tracepoint/Kprobe/XDP/LSM)、Ring Buffer选择策略,到生产级网络延迟诊断工具编写。涵盖Cilium/Falco/Katran/Pixie四大开源项目落地实测数据,CO-RE跨内核版本兼容方案,eBPF未来发展方向。含完整libbpf+CO-RE代码示例与性能基准数据。

Linux 内核网络栈深度剖析:从网卡到用户态的数据路径全链路

深入剖析 Linux 内核网络数据包处理的完整路径——从中断触发到系统调用返回——重点解析 NAPI 轮询、GRO/GSO 分段卸载、Ring Buffer 零拷贝机制、XDP/eBPF 快速路径以及 AF_XDP 用户态通道。配合可编译的代码示例和真实性能数据,给出一份面向生产环境的调优手册。

eBPF Networking Deep Dive: From XDP Packet Processing to TCP Tracing and Production Deployment

Comprehensive deep-dive into eBPF networking internals: XDP packet processing at driver level, Traffic Control subsystem, socket-level tracing with kprobes, TCP state machine and retransmission analysis, DNS query monitoring, network latency distribution and throughput measurement, production deployment guide with kernel configuration, containerized environments, and performance optimization strategies.