u/jamala2000

Hello,

I'd like to ask a question about network probing from a pod or service while the destination is Internet. If the packet reaches to the default gateway, it means there is no policy blocking it and connectivity is successful. How I can drop the packet that is generated in user space with DSCP value?

- What program can I use for this? Considering Cilium utilizes SNAT, how to make sure I can identify the source address of the packet?

For pod-to-pod traffic probing, I used cgroup/ingress to drop the packet if they reach destination pod. However, internet probing seems more complicated to me and I really need help/ideas.

Much appreciated and thanks in advance! :)

Hey!

I would like to know if there are companies that hire international graduates in the Cloud/DevOps field with only basic Norwegian language skills. If so, which ones?

My master's program specialization was in Security and Cloud Computing at NTNU Trondheim, and I was late to start taking Norwegian courses. I have been getting rejections so far without any proper feedback, and I'm wondering if my language skills might be one of the reasons.

I'm also curious whether anyone has managed to get a job in Cloud Engineering without much work experience. I'm considering whether I should also start applying for Software Development/Engineering roles.

Note: The reason I'm primarily applying for DevOps roles is that my master’s program and I also have a few years of experience in DevOps.

Hello,

I am a writing BPF program to monitor network packet drops, the reason why they are dropping, connections etc. Using tracepoint/skb/kfree_skb and kprobe/udp_sendmsg for monitoring UDP connections and drop reasons. However, the program doesn't show the reason such as DNS couldn't resolve or the reason code for this.

So the question is which kernel function or tracepoint I can use to get this information?

What my program displays right now while querying invalid website:

  {
    "type": "UDP",
    "pid": 519,
    "uid": 991,
    "comm": "systemd-resolve",
    "src": "10.0.2.15",
    "sport": 31956,
    "dst": "10.0.2.3",
    "dport": 53
  },
  {
    "type": "UDP",
    "pid": 519,
    "uid": 991,
    "comm": "systemd-resolve",
    "src": "10.0.2.15",
    "sport": 1763,
    "dst": "10.0.2.3",
    "dport": 53
  },
  {
    "type": "PKT_DROP",
    "pid": 4295,
    "uid": 0,
    "comm": "kworker/0:0",
    "src": "-",
    "sport": 0,
    "dst": "-",
    "dport": 56,
    "drop_reason": "OTHER"
  },
  {
    "type": "UDP",
    "pid": 2126,
    "uid": 115,
    "comm": "cups-browsed",
    "src": "127.0.0.1",
    "sport": 38575,
    "dst": "127.0.0.53",
    "dport": 53
  },

Thanks in advance! I'd appreciate any help or reading materials regarding this.

Hey, I started to learn about eBPF and was wondering why we cannot use gcc to compile programs? As far as I understand, only clang can be used for compiling bpf programs in C.