networking

eBPF:Linux内核可观测性革命——从入门到生产级实战

深度解析 eBPF(Extended Berkeley Packet Filter)架构与实战:从核心组件(Verifier/JIT/BPF Maps)、程序类型(Tracepoint/Kprobe/XDP/LSM)、Ring Buffer选择策略,到生产级网络延迟诊断工具编写。涵盖Cilium/Falco/Katran/Pixie四大开源项目落地实测数据,CO-RE跨内核版本兼容方案,eBPF未来发展方向。含完整libbpf+CO-RE代码示例与性能基准数据。

io_uring Send-Zero-Copy 与 Registered Buffers 深度实战

深入剖析 io_uring 的 Send-Zero-Copy (IORING_OP_SEND_ZC) 机制,从协议语义、registered buffer 与 provided buffer 的选择策略、多缓冲区协作、错误恢复到生产可用的 ZC 网络服务骨架构建,涵盖内核 6.7+ 的最新特性与实测性能数据。

eBPF Networking Deep Dive: From XDP Packet Processing to TCP Tracing and Production Deployment

Comprehensive deep-dive into eBPF networking internals: XDP packet processing at driver level, Traffic Control subsystem, socket-level tracing with kprobes, TCP state machine and retransmission analysis, DNS query monitoring, network latency distribution and throughput measurement, production deployment guide with kernel configuration, containerized environments, and performance optimization strategies.