Automatic eBPF program generation method for performance monitoring
Meizhu Du, Xinfeng Shu · 2023
With the expansion of network and server scale, the prominence of system security issues becomes apparent. eBPF serves as a tool for packet filtering and monitoring in the Linux kernel space. Its widespread utilization in the field of network security can be attributed to its performance and flexibility. However, the process of manual eBPF program creation is intricate and prone to introducing vulnerabilities, consequently leading to high development and maintenance costs. In order to address these concerns, this paper introduces a specification language for performance requirements, referred to as SPRSL, which is based on various application scenarios of eBPF programs. The performance index data is stored in XML format, and an algorithm is devised to convert SPRSL to eBPF programs, thereby realizing an automatic generation method for eBPF programs.