Watch and track your favorite playlist.
Curated by: CNCF [Cloud Native Computing Foundation] (43 videos)
释放魔力：在 Istio 环境模式中利用 eBPF 进行流量重定向 | Unleashing the Magic: Harnessing EBPF for Traffic Redirection in Istio Ambient Mode - Chun Li & Iris Ding, Intel Istio 环境服务网格引入了一种新的数据平面模式，无需 Sidecar，而是在每个 Kubernetes 节点上使用共享代理（ztunnel）进行安全连接。传统上，使用 iptables 和覆盖隧道进行流量重定向，但 eBPF 提供了一种更高效和灵活的方法。本次演讲将回顾 iptables 模式，并探讨利用 eBPF 实现 Istio 环境中流量重定向的方法。我们将讨论设计原则以及背后的思维过程。此外，eBPF 的出现导致需要在相同位置挂钩来自不同项目的多个 eBPF 程序。本次演讲将深入探讨如何有效地集成多个针对同一网络接口的 eBPF XDP 程序。它还将探讨基于直接操作的多个 eBPF tc 程序链接的过程。 Istio Ambient Service Mesh introduces a new data plane mode without sidecars, using a shared agent (ztunnel) on each Kubernetes node for secure connectivity. Traditionally, iptables and overlay tunnels are used for traffic redirection, but eBPF provides a more efficient and flexible approach. This talk reflects on the iptables mode and explore the approach that leverages eBPF to achieve traffic redirection in Istio Ambient. We will discuss the design principles and the thought process behind this it. Furthermore, the emergence of eBPF has led to the need for hooking multiple eBPF programs from different projects in the same location. This talk provides insights on effectively integrating multiple eBPF XDP programs for the same network interface. It also explores the process of chaining multiple eBPF tc programs which are based on direct-action.