L3AFD: Lightweight eBPF Daemon
L3AFD is a crucial part of the L3AF ecosystem. For more information on L3AF see https://l3af.io/
Overview
L3AFD is the primary component of the L3AF control plane. L3AFD is a daemon that orchestrates and manages multiple eBPF programs. L3AFD runs on each node where the user wishes to run eBPF programs. L3AFD reads configuration data and manages the execution and monitoring of eBPF programs running on the node.
L3AFD downloads pre-built eBPF programs from a user-configured repository. However, we envision the creation of a community-driven eBPF package marketplace where L3AF users can obtain a variety of eBPF programs developed by multiple sources.
Try it out
See our L3AF Development Environment for a quick and easy way to try out L3AF on your local machine.
Installing
Try a binary release.
Building
To build on your local machine, including swagger docs do the following.
For Linux:
make
For Windows:
cmake -B build
cmake --build build
Testing
To test on your local machine, do the following.
For Linux:
go test ./...
For Windows:
go test -tags WINDOWS ./...
Generate Swagger Docs
See our Swaggo setup
Contributing
Contributing to L3afd is fun. To get started: