Virtualizing eBPF with Late-Binding
Jing Zhang · Xiaguannan Song · Dong Du · Yubin Xia · Binyu Zang · Haibo Chen
摘要
While eBPF has become the de facto standard for kernel customization in cloud-native systems, its design implicitly assumes a single trust domain. Allowing multiple tenants to deploy their own eBPF programs breaks this assumption, making the system both insecure and inefficient. We identify the r...