Kyanos: eBPF-based network issue analysis tool
1–10 of 16 posts
Re: Kyanos: eBPF-based network issue analysis tool
#2Great. Now we could gain detailed insights into how our system is behaving in real time, which is invaluable for troubleshooting and optimizing performance. For those who just heard eBPF, there is the fun-damental source about it [0].
Links: [0]: https://ebpf.io/books/buzzing-across-space-illustrated-child...
Re: Kyanos: eBPF-based network issue analysis tool
#3Really cool, I remember a specific incident six odd years ago where I had to wade through tcpdump files to investigate an issue, and wished I could create something like this. I suppose you get more control over data if you're doing it the "hard" way (e.g I don't see an option to use `median`s in here) but I am guessing you likely dont need it in 90% of the cases
Re: Kyanos: eBPF-based network issue analysis tool
#4Great. Now we could gain detailed insights into how our system is behaving in real time, which is invaluable for troubleshooting and optimizing performance. For those who just heard eBPF, there is the fun-damental source about it [0]. Links: [0]: https://ebpf.io/books/buzzing-across-space-illustrated-child...
Great book!
Re: Kyanos: eBPF-based network issue analysis tool
#5Speaking of network debugging tools, I really miss the network connectivity troubleshooting tool (and supporting network configuration database service) at Meta that has panopticon-like awareness of all networks, network rules, host firewall rules, and user/service user privileges. It ran with syntax paraphrased like the following:
{{whatever_it_was_called}} {{src_ip_or_host[:src_port]}} {{dest_ip_or_host_or_network}}:{{dest_port}} [service_or_user_privileged_membership_group]
Sadly, sysadmin and netadmin tools, responsibilities, and skills are withering trades that have been subsumed or ignored in the modern SWE/SRE enterprise almost as afterthoughts.
Re: Kyanos: eBPF-based network issue analysis tool
#6Great. Now we could gain detailed insights into how our system is behaving in real time, which is invaluable for troubleshooting and optimizing performance. For those who just heard eBPF, there is the fun-damental source about it [0]. Links: [0]: https://ebpf.io/books/buzzing-across-space-illustrated-child...
Nice nice!
Btw, I'm wondering if OFED and/or DPDK are also still used, and if they're still used for fast packet pushing.
Re: Kyanos: eBPF-based network issue analysis tool
#7Great. Now we could gain detailed insights into how our system is behaving in real time, which is invaluable for troubleshooting and optimizing performance. For those who just heard eBPF, there is the fun-damental source about it [0]. Links: [0]: https://ebpf.io/books/buzzing-across-space-illustrated-child...
Nice nice! Btw, I'm wondering if OFED and/or DPDK are also still used, and if they're still used for fast packet pushing.
Can't use RDMA without MOFED properly on Nvidia cards.
Re: Kyanos: eBPF-based network issue analysis tool
#8Great. Now we could gain detailed insights into how our system is behaving in real time, which is invaluable for troubleshooting and optimizing performance. For those who just heard eBPF, there is the fun-damental source about it [0]. Links: [0]: https://ebpf.io/books/buzzing-across-space-illustrated-child...
Nice nice! Btw, I'm wondering if OFED and/or DPDK are also still used, and if they're still used for fast packet pushing.
I think there must be still some corp frameworks that do use it extensively, but it's just not heard all that much about.
Some examples, (Broadcom) Vmware NSX-T gateways, Alivaba used to use it, and a lot of extreme HFT use it too, mostly to reduce latency and manipulate tcp.
Re: Kyanos: eBPF-based network issue analysis tool
#9Seems like it currently only supports protocols http, mysql, redis?
Also, when you let it run through some wireguard vpn, the information is a lot more limited.
Re: Kyanos: eBPF-based network issue analysis tool
#10Great. Now we could gain detailed insights into how our system is behaving in real time, which is invaluable for troubleshooting and optimizing performance. For those who just heard eBPF, there is the fun-damental source about it [0]. Links: [0]: https://ebpf.io/books/buzzing-across-space-illustrated-child...
Why would anyone want to read about eBPF in such a format?