Skip to content

[DONT TOUCH]agv15 to master chanes - #136

Open
gauravakto wants to merge 93 commits into
ag/v15-prodfrom
feature/k8s_ebpf
Open

[DONT TOUCH]agv15 to master chanes#136
gauravakto wants to merge 93 commits into
ag/v15-prodfrom
feature/k8s_ebpf

Conversation

@gauravakto

Copy link
Copy Markdown

No description provided.

notshivansh and others added 30 commits July 25, 2025 11:56
…a_ebpf

Adding sasl auth in kafka for agent
notshivansh and others added 30 commits March 3, 2026 10:29
…changed-env

Preserve environment variables across process restarts
* added env read

* implement tag merging functionality to combine injected tags with existing pod labels
* add more logs

* re enable bad sequence

* remove call

* save memory if threat not enabled

* remove unecessary logs

* Pre-fill existing connections

* parse body in 10 minutes only.

* Refactor to smaller funcs

* reduce logs

* enable by flag

* change header name

* fix merge errors

* remove not needed toolchain directive

* added logs

* moved function call

* add profiler

* removed logs

* add pyroscope

* Revert "add pyroscope"

This reverts commit 2740875.

* remove pprof server

* reduce log limit

---------

Co-authored-by: harshithb3304 <harsh03032004@gmail.com>
…ng functionality. Added AKTO_SUPPRESS_TRACE and CRASH_RESTART_BACKOFF_SECONDS for better control over logging behavior and crash recovery. Refactored run_ebpf_once to streamline logging output based on the new flags.
Enhance ebpf-run.sh with new environment variables and improved loggi…
* fix cgroup file locations

* tune params
* eBPF host binary changes

* fixes

* add steps and docs for amzn2

* fix instruction
* Add OpenSSL 3.5.x support for SSL uprobes

- Extend version cap from 3.0.x to 3.5.x
- Add offsetsForVersion() to cleanly map OpenSSL versions to struct offsets
- Handle ssl_connection_st layout split introduced in 3.2+ where rbio moved
  from offset 16 (ssl_st) to offset 80 (ssl_connection_st) in 3.4+
- Add BPF probe functions probe_entry_SSL_write_3_5 / probe_entry_SSL_read_3_5
  using sslVersion=5 with SSL_rbio_offset=80, RBIO_num_offset=56
- Add SslHooks_3_5 and SslHooks_3_5_ex hook lists
- Add amzn3-6.1-setup.sh setup script for Amazon Linux 3 / kernel 6.1

Offsets verified on OpenSSL 3.5.5 (Amazon Linux 3) with:
  sudo gdb -batch -ex "add-symbol-file /usr/lib64/libssl.so.3.5.5" -ex "ptype /o struct ssl_connection_st" -ex "quit"
  sudo gdb -batch -ex "add-symbol-file /usr/lib64/libcrypto.so.3.5.5" -ex "ptype /o struct bio_st" -ex "quit"

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* add changes for amzn 2023-.6.1

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants