• Title/Summary/Keyword: eBPF

Search Result 13, Processing Time 0.038 seconds

eBPF Technology Trends for Networking and Security in Cloud-native (클라우드 네이티브 환경에서 네트워킹 및 보안을 위한 eBPF 기술 동향)

  • Shin, Y.Y.;Shin, J.S.;Park, C.H.;Park, J.G.
    • Electronics and Telecommunications Trends
    • /
    • v.37 no.5
    • /
    • pp.62-69
    • /
    • 2022
  • In a situation where applications determine business competitiveness, they cannot respond to varying customer requirements without the cloud's flexibility and scalability. Companies have begun seeking ways to enjoy the advantages of the cloud fully, and the concept of "Cloud Native" is emerging as a solution to the problem. Cloud Native is now a target of interest in the market. Microservice and serverless functions can play a vital role in cloud-native architecture. Microservice arranges applications into various independent services, each offering certain functionality through mutual networking. eBPF is attracting attention as a cloud-native networking solution that quickly supports microservice features that repeat creation/deletion. This study identifies the characteristics of eBPF-based networking and evaluates cloud-native networking and secure networking using eBPF.

Compact 40 GHz Hairpin Band-Pass Filter (초소형 40 GHz Hairpin 대역통과 여파기)

  • Lee, Young Chul
    • Journal of Advanced Navigation Technology
    • /
    • v.22 no.1
    • /
    • pp.27-30
    • /
    • 2018
  • In this study, a 40 GHz band pass filter(BPF) employing a hair-pin structure has been designed, fabricated, and characterized for millimeter-wave wireless communication applications. Using the 3 dimensional(3-D) electromagnetic(EM) tool and design equations of the hairpin BPF, the BPF was desgned on the 5 mil-thick Duroid substrate(RT5880) with a relative dielectric constant (${\varepsilon}_r$) of 2.2. The tapping point (t) of the U-shape resonator in the input and output port has been determined using extracted an external Q-factor ($Q_e$). The coupling coefficients between the other resonators are calculated by adjusting the physical dimensions for the desired response of the BPF. The fabricated BPF was characterized using probing method on a probe station. Its measured center frequency(fc) and fractional BW are 41.6 GHz and 7.43 %, respectively. The measured return loss is below -10 dB at the pass band and the insertion loss is 3.87 dB. The fabricated BPF is as small as $9.1{\times}2.8mm^2$.

Time-dependent Effects of Bisphenol Analogs on Ecdysteroid Pathway Related Genes in the Brackish Water Flea Diaphanosoma celebensis (Bisphenol 구조 유사체가 기수산 물벼룩 Ecdysteroid 경로에 미치는 영향)

  • In, Soyeon;Lee, Young-Mi
    • Journal of Marine Life Science
    • /
    • v.6 no.2
    • /
    • pp.73-79
    • /
    • 2021
  • Bisphenol A is a representative endocrine disruptor and continuously detected in aquatic environment due to wide use, resulting in adverse effects on growth, development, and reproduction in diverse organisms as well as human. Structural analogs have been developed to substitute BPA are also suspected to have endocrine disrupting effects. In the present study, the time-dependent expression patterns of ecdysteroid synthesis (nvd, cyp314a1), receptors (EcRA, EcRB, USP, ERR), and downstream signaling pathway - related genes (HR3, E75, Vtg, VtgR) were investigated using quantitative real time reverse transcription polymerase chain reaction (qRT-PCR) in the brackish water flea Diaphanosoma celebensis exposed to Bisphenol analogs (BPs; BPA, BPF, and BPS) for 6, 12, and 24 h. As results, the expression of nvd, cyp314a1, EcRs, USP, ERR and E75 mRNA was upregulated at 6 h exposure to BPF, which is earlier than BPA and BPS (12 h). On the other hand, HR3, E75 and VtgR mRNA levels were elevated at 6 h earlier at BPS and BPF than at BPA (12 h), but Vtg mRNA level was slightly changed within 24 h. These findings suggest that like BPA, BPF and BPS can also modulate the transcription of ecdysteroid pathway - related genes with different mechanisms, and have a potential as endocrine disruptors. This study will provide a better understanding the molecular mode of action of bisphenols on ecdysteroid pathway in the brackish water flea.

BPFast: An eBPF/XDP-Based High-Performance Packet Payload Inspection System for Cloud Environments (BPFast: 클라우드 환경을 위한 eBPF/XDP 기반 고속 네트워크 패킷 페이로드 검사 시스템)

  • You, Myoung-sung;Kim, Jin-woo;Shin, Seung-won;Park, Tae-june
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.32 no.2
    • /
    • pp.213-225
    • /
    • 2022
  • Containerization, a lightweight virtualization technology, enables agile deployments of enterprise-scale microservices in modern cloud environments. However, containerization also opens a new window for adversaries who aim to disrupt the cloud environments. Since microservices are composed of multiple containers connected through a virtual network, a single compromised container can carry out network-level attacks to hijack its neighboring containers. While existing solutions protect containers against such attacks by using network access controls, they still have severe limitations in terms of performance. More specifically, they significantly degrade network performance when processing packet payloads for L7 access controls (e.g., HTTP). To address this problem, we present BPFast, an eBPF/XDP-based payload inspection system for containers. BPFast inspects headers and payloads of packets at a kernel-level without any user-level components. We evaluate a prototype of BPFast on a Kubernetes environment. Our results show that BPFast outperforms state-of-the-art solutions by up to 7x in network latency and throughput.

Design and Implementation of eBPF-based Virtual TAP for Inter-VM Traffic Monitoring (가상 네트워크 트래픽 모니터링을 위한 eBPF 기반 Virtual TAP 설계 및 구현)

  • Hong, Jibum;Jeong, Seyeon;Yoo, Jae-Hyung;Hong, James Won-Ki
    • KNOM Review
    • /
    • v.21 no.2
    • /
    • pp.26-34
    • /
    • 2018
  • With the proliferation of cloud computing and services, the internet traffic and the demand for better quality of service are increasing. For this reason, server virtualization and network virtualization technology, which uses the resources of internal servers in the data center more efficiently, is receiving increased attention. However, the existing hardware Test Access Port (TAP) equipment is unfit for deployment in the virtual datapaths configured for server virtualization. Virtual TAP (vTAP), which is a software version of the hardware TAP, overcomes this problem by duplicating packets in a virtual switch. However, implementation of vTAP in a virtual switch has a performance problem because it shares the computing resources of the host machines with virtual switch and other VMs. We propose a vTAP implementation technique based on the extended Berkeley Packet Filter (eBPF), which is a high-speed packet processing technology, and compare its performance with that of the existing vTAP.

The Design of Ku-Band Cavity BPF (Ku-Band Cavity BPF설계)

  • Jeon, Hyung-Joon;Kang, Chang-Soo
    • Journal of the Institute of Electronics Engineers of Korea TE
    • /
    • v.42 no.4
    • /
    • pp.69-76
    • /
    • 2005
  • In this paper, a 2 stage 6-pole bandpass filter(BPF) is designed and implemented by using triple-mode cavity for satellite payload system. The BPF has a 100MHz bandwidth at the center frequency of 14.5GHz(Ku-band) and the response of the filter is the Chebyshev function. The cavity filter uses two orthogonal $TM_{113}$ modes and one $TM_{012}$ mode. The coupling between the adjacent cavityes(intercavity coupling) results in a Chebyshev response and is accomplished by only H-filed component of If modes. The size and location of intercavity slot is determined by the coupling equation from E-and H-field of TE and TM resonant modes in circular cavity. The 2-stage 6-pole triple-mode cavity BPF has the insertion loss of 2.4dB and the reflection loss of 15dB in the passband. The triple-mode BPF proposed in this thesis can be used as channel filters for satellite payload system and can minimize filter assembly in general wireless communication system.

A Technique for Accurate Detection of Container Attacks with eBPF and AdaBoost

  • Hyeonseok Shin;Minjung Jo;Hosang Yoo;Yongwon Lee;Byungchul Tak
    • Journal of the Korea Society of Computer and Information
    • /
    • v.29 no.6
    • /
    • pp.39-51
    • /
    • 2024
  • This paper proposes a novel approach to enhance the security of container-based systems by analyzing system calls to dynamically detect race conditions without modifying the kernel. Container escape attacks allow attackers to break out of a container's isolation and access other systems, utilizing vulnerabilities such as race conditions that can occur in parallel computing environments. To effectively detect and defend against such attacks, this study utilizes eBPF to observe system call patterns during attack attempts and employs a AdaBoost model to detect them. For this purpose, system calls invoked during the attacks such as Dirty COW and Dirty Cred from popular applications such as MongoDB, PostgreSQL, and Redis, were used as training data. The experimental results show that this method achieved a precision of 99.55%, a recall of 99.68%, and an F1-score of 99.62%, with the system overhead of 8%.

원형도파관을 이용한 Ku-band BPF 설계

  • Jeon, Hyeong-Jun;Gang, Chang-Su
    • Proceedings of the IEEK Conference
    • /
    • 2005.11a
    • /
    • pp.1273-1278
    • /
    • 2005
  • In this thesis, a 2 stage 6-pole bandpass filter(BPF) is designed and implemented by using triple-mode cavity for satellite payload system. The BPF has a 100MHz bandwidth at the center frequency of 14.5GHz(Ku-band) and the response of the filter is the Chebyshev function. The cavity filter uses two orthogonal $TE_{113}$ modes and one $TM_{012}$ mode. The coupling between the adjacent cavityes(intercavity coupling) results in a Chebyshev response and is accomplished by only H-filed component of TE modes. The size and location of intercavity slot is determined by the coupling equation from E- and H-field of TE and TM resonant modes in circular cavity. The 2-stage 6-pole triple-mode cavity BPF has the insertion loss of 2.4dB and the reflection loss of 15dB in the passband. The triple-mode BPF proposed in this thesis can be used as channel filters for satellite payload system and can minimize filter assembly in general wireless communication system.

  • PDF

Conceptual Design of Networking Node with Real-time Monitoring for QoS Coordination of Tactical-Mesh Traffic (전술메쉬 트래픽 QoS 조율을 위한 네트워킹 노드의 개념 설계 및 실시간 모니터링)

  • Shin, Jun-Sik;Kang, Moonjoong;Park, Juman;Kwon, Daehoon;Kim, JongWon
    • Smart Media Journal
    • /
    • v.8 no.2
    • /
    • pp.29-38
    • /
    • 2019
  • With the advancement of information and communication technology, tactical networks are continuously being converted to All-IP future tactical networks that integrate all application services based on Internet protocol. Futuristic tactical mesh network is built with tactical WAN (wide area network) nodes that are inter-connected by a mesh structure. In order to guarantee QoS (quality of service) of application services, tactical service mesh (TSM) is suggested as an intermediate layer between infrastructure and application layers for futuristic tactical mesh network. The tactical service mesh requires dynamic QoS monitoring and control for intelligent QoS coordination. However, legacy networking nodes used for existing tactical networks are difficult to support these functionality due to inflexible monitoring support. In order to resolve such matter, we propose a tactical mesh WAN node as a hardware/software co-designed networking node in this paper. The tactical mesh WAN node is conceptually designed to have multi-access networking interfaces and virtualized networking switches by leveraging the DANOS whitebox server/switch. In addition, we explain how to apply eBPF-based traffic monitoring to the tactical mesh WAN node and verify the traffic monitoring feasibility for supporting QoS coordination of tactical-mesh traffic.

2-state 5-pole bandpass filter consisted of dual and tripe-mode cavity resonator (이중 및 삼중모드 공동 공진기로 구성된 2단 5-Pole 대역통과 필터)

  • 김상철;홍의석
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.22 no.6
    • /
    • pp.1251-1258
    • /
    • 1997
  • Generally, it is very important to study selective coupling between cavities of the filter structure using multimode cavity resonator. In this paper, we have manufactured 5-pole bandpass filter(BPF) using dual and triple-mode cavity resonator. To do so, we have derived the formulas for coupling coefficient about coupling between TE-modes from TM/TE-mode's tangential and lognitudinal field intensities each other. To implement the Chebyshev response, the intercabity slot combining dual-mode and triple-mode is designed to couple one H-field of TE-mode parallel to slot plate. In this paper, specially it is derived the formulas for T $E_{11p}$-mode from TE-modes, and determined after obtaining location and size of intercabity slot from the equation. In this ppaer, based on this result, we designed and implmented teh bandpass filter operated at the center frequency of 14.5GHz with a Chebyshev response. For the manufactured cavity filter, dual-mode and triple-mode cavity are resonted by two orthogonal T $E_{113}$-modes, and by two orthogonal T $E_{113}$-modes and one T $M_{012}$-mode, respecitively. The 2-stage 5-pole BPF proposed in this paper has the insertion loss of -2.32dB, the reflection loss of -15dB in the passband, and the out-or-rejection of -67dB.

  • PDF