US 11,928,529 B2
High-throughput BPF map manipulations with uprobes
Omid Jalal Azizi, San Francisco, CA (US); John Peter Stevenson, San Francisco, CA (US); and Yaxiong Zhao, San Francisco, CA (US)
Assigned to NEW RELIC, INC., San Francisco, CA (US)
Filed by New Relic, Inc., San Francisco, CA (US)
Filed on Oct. 21, 2021, as Appl. No. 17/507,635.
Prior Publication US 2023/0130274 A1, Apr. 27, 2023
Int. Cl. G06F 9/54 (2006.01); G06F 21/54 (2013.01)
CPC G06F 9/545 (2013.01) [G06F 21/54 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for manipulating a Berkeley Packet Filter (BPF) map, the method comprising:
running a user program in a user space of a computing environment, the user program including a trigger function corresponding to a kernel BPF probe;
triggering the kernel BPF probe by reaching a memory address of the trigger function in the user space;
providing, via the kernel BPF probe, one or more operation parameters to a BPF map agent in a kernel space of the computing environment; and
performing, via the BPF map agent, one or more operations to manipulate a BPF map in the kernel space based on the one or more operation parameters.