If tracing is needed, P4 invented INT (Inband Network Telemetry).  Even 
Innovium’s switching asic which does not support P4, supports INT.

 

Hemant

 

From: Jim Thompson <[email protected]> 
Sent: Monday, March 15, 2021 3:55 PM
To: [email protected]
Cc: [email protected]; vpp-dev <[email protected]>
Subject: Re: [vpp-dev] Lunching eBPF on VPP

 

 

Much ado about very little in this thread.   The subject of running eBPF in VPP 
goes back to at least May 2016.

 

I don't know of any current plans to support running eBPF or P4 in VPP.

 

There was a short-lived project to run eBPF VPP as a trace engine: 
https://gerrit.fd.io/r/q/ebpf

and a different project to run P4 in VPP: 
https://gerrit.fd.io/r/admin/repos/p4vpp

 

neither resulted in much interest, and with good reason.   It's likely just as 
easy (and more performant) to write a (set of) VPP node(s).

 

There is an AF_XDP driver for VPP at src/plugins/af_xdp and you can use a 
custom eBPF program against the underlying kernel interface.  This may be 
enough for your needs, or it may not.

 

 

On Mon, Mar 15, 2021 at 12:29 PM hemant via lists.fd.io <http://lists.fd.io>  
<[email protected] <mailto:[email protected]> > wrote:

Note, if eBPF runs in linux user space, you will need work in a preprocessor to 
change code that runs in kernel.  Additionally, you should first look at DDOS 
attacks and then see if eBPF can help.  See 

 

https://tools.ietf.org/html/rfc4732

 

Hemant

 

From: [email protected] <mailto:[email protected]>  <[email protected] 
<mailto:[email protected]> > On Behalf Of Sergey
Sent: Saturday, March 13, 2021 1:14 PM
To: [email protected] <mailto:[email protected]> 
Subject: [vpp-dev] Lunching eBPF on VPP

 

Hello!

I need to add some special logic to firewall (it is simple eBPF programs for 
DDoS mitigation).
Currently we use bare DPDK for launching it.

But it will be much better to use it with VPP.
Are there any plans about adding such feature (something like XDP in Kernel)?

If there are no such plans, we want to start developing. Will it have a chance 
to be merged? 

 




Attachment: smime.p7s
Description: S/MIME cryptographic signature

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#18929): https://lists.fd.io/g/vpp-dev/message/18929
Mute This Topic: https://lists.fd.io/mt/81308758/21656
Group Owner: [email protected]
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to