Kernel Recipes 2019 - Suricata and XDP
Suricata is a network threat detection engine using network packets capture to reconstruct the traffic till the application layer and find threats on the network using rules that define behavior to detect. This task is really CPU intensive and discarding non interesting traffic is a solution to enable a scaling of Suricata to 40gbps and other.
This talk will present the latest evolution of Suricata that knows uses eBPF and XDP to bypass traffic. Suricata 5.0 is supporting the hardware XDP to provide ypass with network card such as Netronome. It also takes advantage of pinned maps to get persistance of the bypassed flows. This talk will cover the different usage of XDP and eBPF in Suricata and shows how it impact performance and usability. If development time permit, the talk will also cover AF_XDP and the impact on this new capture method on Suricata.
Видео Kernel Recipes 2019 - Suricata and XDP канала Kernel Recipes
This talk will present the latest evolution of Suricata that knows uses eBPF and XDP to bypass traffic. Suricata 5.0 is supporting the hardware XDP to provide ypass with network card such as Netronome. It also takes advantage of pinned maps to get persistance of the bypassed flows. This talk will cover the different usage of XDP and eBPF in Suricata and shows how it impact performance and usability. If development time permit, the talk will also cover AF_XDP and the impact on this new capture method on Suricata.
Видео Kernel Recipes 2019 - Suricata and XDP канала Kernel Recipes
Показать
Комментарии отсутствуют
Информация о видео
Другие видео канала
![Kernel Recipes 2022 - What’s new with io_uring](https://i.ytimg.com/vi/ToSRCSijRuE/default.jpg)
![Embedded Recipes 2022 - The next 50 million firmware updates](https://i.ytimg.com/vi/iR_KAjRe9fA/default.jpg)
![Kernel Recipes 2018 - Mitigating Spectre and Meltdown vulnerabilities - David Woodhouse](https://i.ytimg.com/vi/wZmqzB4QMpg/default.jpg)
![Embedded Recipes 2019 - Testing firmware the devops way](https://i.ytimg.com/vi/Cs6S928qw6Q/default.jpg)
![Kernel Recipes 2018 - A year of fixing Coverity issues... - Gustavo A. R. Silva](https://i.ytimg.com/vi/qj1Yjc_dK6s/default.jpg)
![Embedded Recipes 2017 - Proper APIs to HW video codec accelerators - Olivier Crete](https://i.ytimg.com/vi/bntAsF8IaLo/default.jpg)
![Kernel Recipes 2016 - Man-pages: discovery, feedback loops, commit message - Michael Kerrisk](https://i.ytimg.com/vi/TbKtpLHjG1I/default.jpg)
![Embedded Recipes 2022 - Tracing on embedded boards](https://i.ytimg.com/vi/7KHLoZKwlBk/default.jpg)
![Kernel Recipes 2022](https://i.ytimg.com/vi/nhJqaZT94z0/default.jpg)
![Kernel Recipes - Creating custom Debian images for your embedded device](https://i.ytimg.com/vi/467kgcSxDf0/default.jpg)
![Kernel Recipes 2015 - Solving the Linux storage scalability bottlenecks - by Jens Axboe](https://i.ytimg.com/vi/VIdKBD9-Ozg/default.jpg)
![Kernel Recipes 2019 - pidfds: Process file descriptors on Linux](https://i.ytimg.com/vi/19SlR_zjPxc/default.jpg)
![Kernel Recipes 2022 - Rethinking the kernel camera framework](https://i.ytimg.com/vi/KL3ajTu8VzU/default.jpg)
![Kernel Recipes 2022 - Make Linux developers fix your kernel bug](https://i.ytimg.com/vi/Uh_mWWMJHDY/default.jpg)
![Kernel Recipes 2019 - BPF at Facebook](https://i.ytimg.com/vi/bbHFg9IsTk8/default.jpg)
![Embedded Recipes 2018 - Using yocto to generate container images for yocto - Jérémy Rosen](https://i.ytimg.com/vi/0S2Qow1IcQA/default.jpg)
![Kernel Recipes 2018 - CLIP OS: a defense-in-depth OS - Mickael Salaün, Timothée Ravier](https://i.ytimg.com/vi/PjRE0uBtkHU/default.jpg)
![Embedded Recipes 2018 - SoC+FPGA support in 2018 - Marek Vasut](https://i.ytimg.com/vi/H7EsuyPQgFc/default.jpg)
![Kernel Recipes 2019 - No NMI? No Problem! – Implementing Arm64 Pseudo-NMI](https://i.ytimg.com/vi/7cVaEiaeSmo/default.jpg)
![Kernel Recipes 2023 - Getting the RK3588 SoC supported upstream](https://i.ytimg.com/vi/pnIVaig-LoA/default.jpg)
![Julia Lawall, INRIA - Coccinelle](https://i.ytimg.com/vi/ohyn1DTuh18/default.jpg)