Packets probes and eBPF filtering in Skydive

Efficient monitoring of large-scale networks poses a delicate balance between capture granularity on the one hand and the imposed overheads and performance penalties on the other. Skydive is an open source real-time network topology and protocol analyzer, featuring...

Qemu in UEFI

UEFI is a firmware specification created by Intel with portability in mind. The UEFI way of doing that was to provide special UEFI byte code (EBC). Unfortunately nobody really cared so compiler, firmware support and providers of EBC option roms ceased and basically...

State of CPU Isolation

The kernel is great at doing its job for your task, providing unified access to hardware, filesystem, network, scheduling your code when you need to, … But can’t it all be done quietly please, because your application is sensitive to headaches and is having a hard...

TPM enabling the Crypto Ecosystem for enhanced Security

For decades, all laptops have come with a TPM.  Now with Microsoft forcing the transition to the next  generation, Linux faces a challenge in that all the previous TPM 1.2 tools don’t work with 2.0.  Having to create new tools for TPM 2.0 also provides the opportunity...

XDP: a new programmable network layer

This talk will introduce XDP (eXpress Data Path), and explain how this is essentially a new (programmable) network layer in-front of the existing network stack. Then it will dive into the details of the new XDP redirect feature, which goes beyond forwarding packets...