From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [IPv6:2a0f:8001:1:32::40]) by lore.proxmox.com (Postfix) with ESMTPS id 0D6EA1FF0A7 for ; Wed, 02 Sep 2026 14:32:56 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id 5D764214C4; Wed, 02 Sep 2026 14:32:54 +0200 (CEST) From: Hannes Laimer To: pve-devel@lists.proxmox.com Subject: [PATCH proxmox-ebpf 0/3] add proxmox-ebpf library Date: Wed, 2 Sep 2026 14:32:26 +0200 Message-ID: <20260902123229.638967-1-h.laimer@proxmox.com> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1788352349393 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.664 Adjusted score from AWL reputation of From: address DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment (newer systems) RCVD_IN_DNSWL_MED -2.3 Sender listed at https://www.dnswl.org/, medium trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_CSS_A 0.1 Contains URL's A record listed in the Spamhaus CSS blocklist [34.117.176.22] Message-ID-Hash: ZFSTOPUAQVPCE7AONSESGGAMQLE4YHXY X-Message-ID-Hash: ZFSTOPUAQVPCE7AONSESGGAMQLE4YHXY X-MailFrom: h.laimer@proxmox.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: proxmox-ebpf holds the eBPF programs and the code to load and drive them, grouped into subsystems. It is a library only, whoever needs a subsystem pulls in just that one through a cargo feature and calls it from their side. This series is the shared part, the actual subsystems come as their own series on top. The core is the shared subsystem code. It takes care of the whole lifecycle, from loading and attaching per interface to pinning in bpffs and tearing down again, so nothing has to keep running and each call picks up where the last one left off. Updates are handled too, the compiled object is hashed at build time and that hash plus a schema version are recorded per subsystem, so a call can tell what changed. A changed program is swapped onto the existing links without interrupting traffic, a changed map schema gets a teardown and rebuild. The BPF C code is also built natively against a small shim, so the parsing and packet building logic can be tested without a kernel. Packaging is debcargo like the other rust crates. proxmox-ebpf: Hannes Laimer (3): add the shared tc subsystem code tests: add a native harness for the BPF C programs debian: package the crate as a rust library .gitignore | 1 + Cargo.toml | 7 + Makefile | 48 ++++ build.rs | 67 ++++++ debian/changelog | 5 + debian/control | 52 +++++ debian/copyright | 18 ++ debian/debcargo.toml | 13 ++ debian/source/format | 1 + src/bpf-shim/bpf/bpf_endian.h | 12 + src/bpf-shim/bpf/bpf_helpers.h | 32 +++ src/bpf-shim/bpf_debug.h | 10 + src/bpf-shim/vmlinux.h | 70 ++++++ src/lib.rs | 3 + src/subsystem.rs | 392 +++++++++++++++++++++++++++++++++ src/tc.rs | 151 +++++++++++++ tests/common/mod.rs | 190 ++++++++++++++++ 17 files changed, 1072 insertions(+) create mode 100644 Makefile create mode 100644 debian/changelog create mode 100644 debian/control create mode 100644 debian/copyright create mode 100644 debian/debcargo.toml create mode 100644 debian/source/format create mode 100644 src/bpf-shim/bpf/bpf_endian.h create mode 100644 src/bpf-shim/bpf/bpf_helpers.h create mode 100644 src/bpf-shim/bpf_debug.h create mode 100644 src/bpf-shim/vmlinux.h create mode 100644 src/subsystem.rs create mode 100644 src/tc.rs create mode 100644 tests/common/mod.rs Summary over all repositories: 17 files changed, 1072 insertions(+), 0 deletions(-) -- Generated by murpp 0.12.0