eBPF? Safety First! - Kemal Akkoyun, Polar Signals & Dave Tucker, Red Hat скачать в хорошем качестве

eBPF? Safety First! - Kemal Akkoyun, Polar Signals & Dave Tucker, Red Hat

eBPF? Safety First! - Kemal Akkoyun, Polar Signals & Dave Tucker, Red Hat eBPF being a promising technology is no news. And C is the defacto choice for writing eBPF programs. The act of writing C programs in an error-prone process. Even the eBPF verifier makes life a lot easier; it is still possible to write unsafe programs and make trivial mistakes that elude the compiler but are detected by the verifier in the load time, which are preventable with compile-time checks. It is where Rust comes in. Rust is a language designed for safety. Recently the Rust compiler gained the ability to compile to the eBPF virtual machine, and Rust became an official language for Linux. We discover more and more use cases where eBPF can be helpful. We find more efficient ways to build safe eBPF programs that are parallel to these developments. We will demonstrate how we made applications combined with Rust in the data plane for more safety and Go in the control plane for a higher development pace to target Kubernetes for security, observability and performance tuning.