Liking cljdoc? Tell your friends :D
lb.programs.common
Common eBPF program fragments and DSL utilities shared between XDP and TC programs.
Common eBPF program fragments and DSL utilities shared between XDP and TC programs.
- add-imm
- add-reg
- AF-INET
- AF-INET6
- assemble-program
- BPF-ANY
- BPF-EXIST
- BPF-F-PSEUDO-HDR
- BPF-F-RECOMPUTE-CSUM
- BPF-FUNC-csum-diff
- BPF-FUNC-get-prandom-u32
- BPF-FUNC-ktime-get-ns
- BPF-FUNC-l3-csum-replace
- BPF-FUNC-l4-csum-replace
- BPF-FUNC-map-delete-elem
- BPF-FUNC-map-lookup-elem
- BPF-FUNC-map-update-elem
- BPF-FUNC-redirect
- BPF-FUNC-redirect-map
- BPF-FUNC-ringbuf-discard
- BPF-FUNC-ringbuf-reserve
- BPF-FUNC-ringbuf-submit
- BPF-FUNC-xdp-adjust-head
- BPF-NOEXIST
- build-bounds-check
- build-copy-ipv6-address
- build-get-prandom-u32
- build-ktime-get-ns
- build-l3-csum-replace
- build-l4-csum-replace
- build-load-ipv4-unified
- build-load-ipv6-address
- build-load-ipv6-address-adjusted
- build-load-ipv6-dst
- build-load-ipv6-src
- build-map-delete
- build-map-lookup
- build-map-lookup-or-init
- build-map-update
- build-parse-eth
- build-parse-ip
- build-parse-ipv6
- build-parse-l4
- build-parse-l4-ipv6
- build-random-mod-100
- build-rate-limit-check
- build-ringbuf-discard
- build-ringbuf-reserve
- build-ringbuf-submit
- build-store-ipv6-address
- build-zero-bytes
- ETH-HLEN
- eth-is-ipv4
- eth-is-ipv6
- eth-is-not-ipv4
- eth-load-ethertype
- ETH-P-IP
- ETH-P-IP-BE
- ETH-P-IPV6
- ETH-P-IPV6-BE
- eth-parse-ethernet
- eth-swap-macs
- flatten-instructions
- FNV1A-64-OFFSET-BASIS-HI
- FNV1A-64-OFFSET-BASIS-LO
- FNV1A-64-PRIME-HI
- FNV1A-64-PRIME-LO
- HTTPS-PORT-BE
- IP-HLEN-MIN
- IPPROTO-ICMP
- IPPROTO-ICMPV6
- IPPROTO-TCP
- IPPROTO-UDP
- ipv4-store-daddr
- ipv4-store-saddr
- IPV6-HLEN
- IPV6-OFF-DST
- IPV6-OFF-HOP-LIMIT
- IPV6-OFF-NEXT-HEADER
- IPV6-OFF-SRC
- ldx-b
- ldx-dw
- ldx-h
- ldx-w
- map-fd
- MAX-SNI-LENGTH
- MAX-TLS-EXTENSIONS
- mov-imm
- mov-reg
- RATE-LIMIT-CONFIG-BACKEND
- RATE-LIMIT-CONFIG-SRC
- SKB-OFF-DATA
- SKB-OFF-DATA-END
- SKB-OFF-LEN
- STACK-OFF-ADDR-FAMILY
- STACK-OFF-CONNTRACK-KEY
- STACK-OFF-DST-IP
- STACK-OFF-DST-PORT
- STACK-OFF-L4-OFFSET
- STACK-OFF-PROTOCOL
- STACK-OFF-SRC-IP
- STACK-OFF-SRC-PORT
- stx-b
- stx-dw
- stx-h
- stx-w
- sub-imm
- sub-reg
- TC-ACT-OK
- TC-ACT-REDIRECT
- TC-ACT-SHOT
- tc-drop-all
- tc-pass-all
- TCP-HLEN-MIN
- tcp-store-dport
- tcp-store-sport
- TLS-CONTENT-TYPE-HANDSHAKE
- TLS-EXT-SNI
- TLS-HANDSHAKE-CLIENT-HELLO
- TLS-HANDSHAKE-HEADER-SIZE
- TLS-HANDSHAKE-LENGTH-OFF
- TLS-HANDSHAKE-TYPE-OFF
- TLS-RECORD-CONTENT-TYPE-OFF
- TLS-RECORD-HEADER-SIZE
- TLS-RECORD-LENGTH-OFF
- TLS-RECORD-VERSION-OFF
- TLS-SNI-NAME-TYPE-HOSTNAME
- TOKEN-SCALE
- UDP-HLEN
- udp-store-dport
- udp-store-sport
- XDP-ABORTED
- XDP-DROP
- xdp-drop-all
- XDP-PASS
- xdp-pass-all
- XDP-REDIRECT
- XDP-TX
lb.programs.tc-egress
TC egress program for the load balancer. Handles reply packets from backends: performs SNAT to restore original destination.
TC egress program for the load balancer. Handles reply packets from backends: performs SNAT to restore original destination.
- attach-to-interface
- attach-to-interfaces
- BPF-F-HDR-FIELD-MASK
- BPF-F-PSEUDO-HDR
- BPF-FUNC-ktime-get-ns
- BPF-FUNC-l3-csum-replace
- BPF-FUNC-l4-csum-replace
- build-tc-egress-program
- build-tc-egress-program-unified
- build-tc-ipv4-filter-program
- build-tc-pass-program
- build-tc-snat-program
- build-tc-snat-program-unified
- detach-from-interface
- detach-from-interfaces
- dump-program-bytecode
- load-program
- load-program-unified
- setup-tc-qdisc
- tc-load-data-ptrs-32
- teardown-tc-qdisc
- verify-program
lb.programs.tc-ingress
TC ingress program for PROXY protocol v2 header injection.
This program runs on the TC ingress path (after XDP DNAT) and injects PROXY protocol v2 headers into the first data packet of each connection that has proxy-protocol enabled.
Flow:
- Parse packet headers (Ethernet, IPv4/IPv6, TCP)
- Lookup conntrack entry by 5-tuple
- Check if proxy_enabled flag is set
- Track TCP state (NEW -> SYN_SENT -> SYN_RECV -> ESTABLISHED)
- On first DATA packet in ESTABLISHED: inject PROXY v2 header
- Set header_injected flag and seq_offset for subsequent packets
TC ingress program for PROXY protocol v2 header injection. This program runs on the TC ingress path (after XDP DNAT) and injects PROXY protocol v2 headers into the first data packet of each connection that has proxy-protocol enabled. Flow: 1. Parse packet headers (Ethernet, IPv4/IPv6, TCP) 2. Lookup conntrack entry by 5-tuple 3. Check if proxy_enabled flag is set 4. Track TCP state (NEW -> SYN_SENT -> SYN_RECV -> ESTABLISHED) 5. On first DATA packet in ESTABLISHED: inject PROXY v2 header 6. Set header_injected flag and seq_offset for subsequent packets
- attach-to-interface
- attach-to-interfaces
- BPF-F-INVALIDATE-HASH
- BPF-F-PSEUDO-HDR
- BPF-F-RECOMPUTE-CSUM
- BPF-FUNC-ktime-get-ns
- BPF-FUNC-l3-csum-replace
- BPF-FUNC-l4-csum-replace
- BPF-FUNC-map-lookup-elem
- BPF-FUNC-map-update-elem
- BPF-FUNC-skb-change-tail
- BPF-FUNC-skb-load-bytes
- BPF-FUNC-skb-store-bytes
- build-tc-ingress-proxy-program
- build-tc-pass-program
- CONN-STATE-ESTABLISHED
- CONN-STATE-NEW
- CONN-STATE-SYN-RECV
- CONN-STATE-SYN-SENT
- CT-OFF-CONN-STATE
- CT-OFF-ORIG-CLIENT-IP
- CT-OFF-ORIG-CLIENT-PORT
- CT-OFF-PAD
- CT-OFF-PROXY-FLAGS
- CT-OFF-SEQ-OFFSET
- detach-from-interface
- detach-from-interfaces
- load-program
- PROXY-FLAG-ENABLED
- PROXY-FLAG-HEADER-INJECTED
- PROXY-V2-ADDR-LEN-IPV4
- PROXY-V2-ADDR-LEN-IPV6
- PROXY-V2-FAMILY-TCP-IPV4
- PROXY-V2-FAMILY-TCP-IPV6
- PROXY-V2-HEADER-SIZE-IPV4
- PROXY-V2-HEADER-SIZE-IPV6
- PROXY-V2-SIG-WORD0
- PROXY-V2-SIG-WORD1
- PROXY-V2-SIG-WORD2
- PROXY-V2-VERSION-CMD
- SHIFT-CHUNK-SIZE
- SHIFT-MAX-CHUNKS
- tc-load-skb-data
- tc-reload-data-ptrs
- TCP-FLAG-ACK
- TCP-FLAG-FIN
- TCP-FLAG-PSH
- TCP-FLAG-RST
- TCP-FLAG-SYN
lb.programs.xdp-ingress
XDP ingress program for the load balancer. Handles incoming packets: parses headers, looks up routing, performs DNAT.
XDP ingress program for the load balancer. Handles incoming packets: parses headers, looks up routing, performs DNAT.
- attach-to-interface
- attach-to-interfaces
- BPF-FUNC-csum-diff
- BPF-FUNC-ktime-get-ns
- build-ipv4-filter-program
- build-xdp-dnat-program
- build-xdp-dnat-program-unified
- build-xdp-ingress-program
- build-xdp-ingress-program-unified
- build-xdp-pass-program
- detach-from-interface
- detach-from-interfaces
- dump-program-bytecode
- load-program
- load-program-unified
- verify-program
- xdp-apply-csum-diff
- xdp-fold-csum
- xdp-load-data-ptrs-32
- xdp-update-csum-for-port-change
cljdoc builds & hosts documentation for Clojure/Script libraries
Keyboard shortcuts
× close| Ctrl+k | Jump to recent docs |
| ← | Move to previous article |
| → | Move to next article |
| Ctrl+/ | Jump to the search field |