YHK - yet another hacker news clone

Tracing Mystery Network Traffic with eBPF Across HRT's Global Compute Cluster

64 points theHRTBeat 4 days ago 5 comments

gandreani 2 days ago | parent

This is a very nice use of eBPF and probably close to the imagined scenario the kernel developers proposed for this.

eBPF has a terrible name but it's absolutely wonderful tech. If you're running a database SaaS you can implement eBPF filters to do the accounting for billing based usage, regardless of which database you use!

To me that's irrefutable evidence that it's really well designed

agentdev001 2 days ago | parent

https://youtu.be/Wb_vD3XZYOA The minidoc on eBPF is worth a watch if OP/OC excites :)

muststopmyths 2 days ago | parent

Not familiar with NFS, but shouldn't it have been possible to attribute the mystery traffic by port number by sniffing ?

ectospheno 1 day ago | parent

Simply graphing netflow data would also have immediately pointed out an error.

cmdrk 2 days ago | parent

The high volume site-to-site data transfers for running simulation etc reminds me strongly of the high energy physics computing world. no wonder so many HEP folks ended up at HRT!