Rosario Rizza
Design and implementation of a tool to improve error reporting for eBPF code.
Rel. Riccardo Sisto, Fulvio Valenza. Politecnico di Torino, Corso di laurea magistrale in Ingegneria Informatica (Computer Engineering), 2024
|
Preview |
PDF (Tesi_di_laurea)
- Tesi
Licenza: Creative Commons Attribution Non-commercial No Derivatives. Download (964kB) | Preview |
Abstract
The eBPF technology is the uprising trend in the cloud computing world, allowing programs to run directly into the kernel space. This leads to having much more control over the system the program is run upon, especially in security and performance sensitive environments like the server operating system. For instance, it enables efficient monitoring and observability by tracking system performance, system calls, and recognising latency issues with minimal overhead, allowing easy implementation of those security policies that need to be enforced in the kernel space. Additionally, eBPF is highly effective in networking and packet filtering, facilitating the creation of custom firewalls, load balancers, and traffic optimizations.
In order to load eBPF programs into the kernel space, they need to be severely scrutinized by the eBPF verifier, a set of deep checks that prevent it from crashing the kernel or, even worse, from escalating privileges and taking control of the system
Relatori
Anno Accademico
Tipo di pubblicazione
Numero di pagine
Corso di laurea
Classe di laurea
URI
![]() |
Modifica (riservato agli operatori) |
