Microsoft yakagadzirira kuita kweEBFF yeWindows

Microsoft yakazarurwa munguva pfupi yapfuura kuburikidza nepositi kuitwa kweEBFF subsystem yeWindows iyo inokutendera iwe kumhanyisa madhiraivha anomhanyisa anomhanya padanho reiyo kernel yeanoshanda system.

eGMP inopa muturikiri akavakirwa-mukati bytecode mu kernel kugadzira mushandisi-nzvimbo-yakatakura madhiraivha enetiweki, kudzora kwekuwana, uye kuongorora system. eBPF yakaverengerwa muLinux kernel kubvira vhezheni 3.18 uye inokutendera iwe kugadzirisa inouya / ichibuda network mapaketi, kumberi mapaketi, kudzora bandwidth, kubvisa system mafoni, kudzora kuwana, uye track.

Kuburikidza neJIT kuunganidzwa, byte kodhi inoshandurwa kuita muchina mirairo pane iyo nhunzi uye inomhanya pamwe nekuita kwekodhi yakanyorwa. EBPF yeWindows yakavhurwa sosi pasi peMIT rezinesi.

Nhasi tinofara kuzivisa itsva yakavhurwa sosi purojekiti kubva kuMicrosoft kuita eBPF ishande paWindows 10 uye Windows Server 2016 uye gare gare. Iyo ebpf-for-windows chirongwa inovavarira kugonesa vanogadzira kuti vashandise vanoziva eBPF maturusi ekushandisa uye kunyorera chirongwa chekupindirana (APIs) pamusoro peshanduro dziripo dzeWindows. Zvichienderana nebasa revamwe, chirongwa ichi chinotora akawanda aripo akavhurwa sosi eBPF mapurojekiti uye inowedzera iyo "glue" kuti iite kuti vamhanye paWindows.

eBPF yeWindows inogona kushandiswa nezviripo zviripo eBPF maturusi uye inopa generic API iyo inoshandiswa kune eBPF kunyorera paLinux.

Kunyanya chirongwa ichi chinokutendera iwe kuumbiridza kodhi yakanyorwa muC kuti bytecode eBPF uchishandisa yakajairwa Clang-based eBPF compiler uye unomhanya madhiraivha eBPF akatovakirwa Linux pamusoro peWindows kernel, iyo inopa yakasarudzika inoenderana dura uye inotsigira yakajairwa Libbpf API yekuenderana nezvikumbiro zvinofambidzana nezvirongwa zveIPFF

Izvi zvinosanganisira zvidimbu zvepakati zvinopa Linux-senge zvisungo zveXDP (eXpress Data Path) uye zvisungo zvemasoketi zvinopfupikisa kupinda kweWindows network stack uye network madhiraivha. Zvirongwa zvinotarisira kupa yakazara sosi-chikamu rutsigiro rwe generic Linux eBPF madhiraivha.

Musiyano wakakosha mukumisikidza eBPF yeWindows ndiko kushandiswa kweimwe bytecode yekutarisa, pakutanga yakarongedzwa nevashandi veVMware nevanoongorora kubva kuCanada neIsrael mayunivhesiti.

Iyo yekuongorora inotangwa mune yakasarudzika yakasarudzika maitiro munzvimbo yemushandisi uye inoshandiswa isati yaitwa zvirongwa zveBPF kuona zvikanganiso uye kuvharira zvinogona kuita zvakashata zviitiko.

Kuti usimbise, eBPF yeWindows inoshandisa iyo isinganzwisisike dudziro static yekuongorora nzira, chii, Inofananidzwa neBPF inosimbisa yeLinux, inoratidza yakaderera nhema nhema chiyero, inotsigira kuongorora kwe loop uye inopa kugona kwakanaka. Maitiro acho anotarisisa akawanda akajairwa maitiro mapatani akawanikwa kubva kuongororwa kweanenge aripo eBPF zvirongwa.

eBPF inyanzvi inozivikanwa asi yechimurenga tekinoroji iyo inopa programmability, extensibility, uye agility. eBPF yakaiswa mukushandisa kesi dzakadai sekuramba kuchengetedzwa kwebasa uye kucherechedzwa.

Nekufamba kwenguva, yakakosha ecosystem yezvishandiso, zvigadzirwa, uye hunyanzvi yakavaka yakatenderedza eBPF. Kunyangwe kutsigirwa kweEBFF kwakatanga kuitiswa muLinux kernel, kwave kune kufarira kuri kukura mukubvumira eBPF kushandiswa mune mamwe masisitimu anoshanda uyezve kuwedzera madhimoni uye mushandisi-mode masevhisi kuwedzera kune kernel.

Mushure mekusimbiswa, iyo bytecode inopfuudzwa kune muturikiri wechero kernel, kana inopfuudzwa kuburikidza neJIT compiler, ichiteverwa nekumhanyisa inoguma kodhi yemuchina nekernel kodzero. Kupatsanura madhiraivha eBPF padanho rekernel, iyo HVCI (HyperVisor Enhanced Code Integrity) mashandisirwo anoshandiswa, ayo anoshandisa maturusi ehunyanzvi ekudzivirira maitiro muiyo kernel uye anovimbisa kuti kuvimbika kwekodhi yakaitwa yakasainwa manhamba.

Kumwe kuderedzwa kweHVCI iko kugona kutarisa chete zvakadudzirwa eBPF zvirongwa uye kusakwanisa kuzvishandisa pamwe chete neJIT (une sarudzo: yekuwedzera kuita kana kuchengetedza).

Finalmente kana iwe uchifarira kuziva zvakawanda nezvazvo, unogona kubvunza chinotevera chinongedzo.


Izvo zviri muchinyorwa zvinoomerera pamisimboti yedu ye tsika dzekunyora. Kuti utaure chikanganiso tinya pano.

Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa.

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako

bool (chokwadi)