요약·해설과 원문, 전문 번역을 서로 분리했습니다. API 이름, symbol, source path는 원문 표기를 사용합니다.
1. 요약·해설
원문의 핵심 논리와 kernel programming 관점의 보충 설명입니다. 아래의 전문 번역과는 별도로 작성했습니다.
2. 영어 원문 전체
번역 기준이 된 Linux v6.18.37 원문입니다. 줄 번호는 이 버전의 파일 좌표입니다.
원문 전체 펼치기
1
.. SPDX-License-Identifier: (LGPL-2.1 OR BSD-2-Clause)
3
.. _program_types_and_elf:
5
Program Types and ELF Sections
6
==============================
8
The table below lists the program types, their attach types where relevant and the ELF section
9
names supported by libbpf for them. The ELF section names follow these rules:
11
- ``type`` is an exact match, e.g. ``SEC("socket")``
12
- ``type+`` means it can be either exact ``SEC("type")`` or well-formed ``SEC("type/extras")``
13
with a '``/``' separator between ``type`` and ``extras``.
15
When ``extras`` are specified, they provide details of how to auto-attach the BPF program. The
16
format of ``extras`` depends on the program type, e.g. ``SEC("tracepoint/<category>/<name>")``
17
for tracepoints or ``SEC("usdt/<path>:<provider>:<name>")`` for USDT probes. The extras are
18
described in more detail in the footnotes.
21
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
22
| Program Type | Attach Type | ELF Section Name | Sleepable |
23
+===========================================+========================================+==================================+===========+
24
| ``BPF_PROG_TYPE_CGROUP_DEVICE`` | ``BPF_CGROUP_DEVICE`` | ``cgroup/dev`` | |
25
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
26
| ``BPF_PROG_TYPE_CGROUP_SKB`` | | ``cgroup/skb`` | |
27
+ +----------------------------------------+----------------------------------+-----------+
28
| | ``BPF_CGROUP_INET_EGRESS`` | ``cgroup_skb/egress`` | |
29
+ +----------------------------------------+----------------------------------+-----------+
30
| | ``BPF_CGROUP_INET_INGRESS`` | ``cgroup_skb/ingress`` | |
31
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
32
| ``BPF_PROG_TYPE_CGROUP_SOCKOPT`` | ``BPF_CGROUP_GETSOCKOPT`` | ``cgroup/getsockopt`` | |
33
+ +----------------------------------------+----------------------------------+-----------+
34
| | ``BPF_CGROUP_SETSOCKOPT`` | ``cgroup/setsockopt`` | |
35
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
36
| ``BPF_PROG_TYPE_CGROUP_SOCK_ADDR`` | ``BPF_CGROUP_INET4_BIND`` | ``cgroup/bind4`` | |
37
+ +----------------------------------------+----------------------------------+-----------+
38
| | ``BPF_CGROUP_INET4_CONNECT`` | ``cgroup/connect4`` | |
39
+ +----------------------------------------+----------------------------------+-----------+
40
| | ``BPF_CGROUP_INET4_GETPEERNAME`` | ``cgroup/getpeername4`` | |
41
+ +----------------------------------------+----------------------------------+-----------+
42
| | ``BPF_CGROUP_INET4_GETSOCKNAME`` | ``cgroup/getsockname4`` | |
43
+ +----------------------------------------+----------------------------------+-----------+
44
| | ``BPF_CGROUP_INET6_BIND`` | ``cgroup/bind6`` | |
45
+ +----------------------------------------+----------------------------------+-----------+
46
| | ``BPF_CGROUP_INET6_CONNECT`` | ``cgroup/connect6`` | |
47
+ +----------------------------------------+----------------------------------+-----------+
48
| | ``BPF_CGROUP_INET6_GETPEERNAME`` | ``cgroup/getpeername6`` | |
49
+ +----------------------------------------+----------------------------------+-----------+
50
| | ``BPF_CGROUP_INET6_GETSOCKNAME`` | ``cgroup/getsockname6`` | |
51
+ +----------------------------------------+----------------------------------+-----------+
52
| | ``BPF_CGROUP_UDP4_RECVMSG`` | ``cgroup/recvmsg4`` | |
53
+ +----------------------------------------+----------------------------------+-----------+
54
| | ``BPF_CGROUP_UDP4_SENDMSG`` | ``cgroup/sendmsg4`` | |
55
+ +----------------------------------------+----------------------------------+-----------+
56
| | ``BPF_CGROUP_UDP6_RECVMSG`` | ``cgroup/recvmsg6`` | |
57
+ +----------------------------------------+----------------------------------+-----------+
58
| | ``BPF_CGROUP_UDP6_SENDMSG`` | ``cgroup/sendmsg6`` | |
59
| +----------------------------------------+----------------------------------+-----------+
60
| | ``BPF_CGROUP_UNIX_CONNECT`` | ``cgroup/connect_unix`` | |
61
| +----------------------------------------+----------------------------------+-----------+
62
| | ``BPF_CGROUP_UNIX_SENDMSG`` | ``cgroup/sendmsg_unix`` | |
63
| +----------------------------------------+----------------------------------+-----------+
64
| | ``BPF_CGROUP_UNIX_RECVMSG`` | ``cgroup/recvmsg_unix`` | |
65
| +----------------------------------------+----------------------------------+-----------+
66
| | ``BPF_CGROUP_UNIX_GETPEERNAME`` | ``cgroup/getpeername_unix`` | |
67
| +----------------------------------------+----------------------------------+-----------+
68
| | ``BPF_CGROUP_UNIX_GETSOCKNAME`` | ``cgroup/getsockname_unix`` | |
69
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
70
| ``BPF_PROG_TYPE_CGROUP_SOCK`` | ``BPF_CGROUP_INET4_POST_BIND`` | ``cgroup/post_bind4`` | |
71
+ +----------------------------------------+----------------------------------+-----------+
72
| | ``BPF_CGROUP_INET6_POST_BIND`` | ``cgroup/post_bind6`` | |
73
+ +----------------------------------------+----------------------------------+-----------+
74
| | ``BPF_CGROUP_INET_SOCK_CREATE`` | ``cgroup/sock_create`` | |
75
+ + +----------------------------------+-----------+
76
| | | ``cgroup/sock`` | |
77
+ +----------------------------------------+----------------------------------+-----------+
78
| | ``BPF_CGROUP_INET_SOCK_RELEASE`` | ``cgroup/sock_release`` | |
79
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
80
| ``BPF_PROG_TYPE_CGROUP_SYSCTL`` | ``BPF_CGROUP_SYSCTL`` | ``cgroup/sysctl`` | |
81
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
82
| ``BPF_PROG_TYPE_EXT`` | | ``freplace+`` [#fentry]_ | |
83
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
84
| ``BPF_PROG_TYPE_FLOW_DISSECTOR`` | ``BPF_FLOW_DISSECTOR`` | ``flow_dissector`` | |
85
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
86
| ``BPF_PROG_TYPE_KPROBE`` | | ``kprobe+`` [#kprobe]_ | |
87
+ + +----------------------------------+-----------+
88
| | | ``kretprobe+`` [#kprobe]_ | |
89
+ + +----------------------------------+-----------+
90
| | | ``ksyscall+`` [#ksyscall]_ | |
91
+ + +----------------------------------+-----------+
92
| | | ``kretsyscall+`` [#ksyscall]_ | |
93
+ + +----------------------------------+-----------+
94
| | | ``uprobe+`` [#uprobe]_ | |
95
+ + +----------------------------------+-----------+
96
| | | ``uprobe.s+`` [#uprobe]_ | Yes |
97
+ + +----------------------------------+-----------+
98
| | | ``uretprobe+`` [#uprobe]_ | |
99
+ + +----------------------------------+-----------+
100
| | | ``uretprobe.s+`` [#uprobe]_ | Yes |
101
+ + +----------------------------------+-----------+
102
| | | ``usdt+`` [#usdt]_ | |
103
+ +----------------------------------------+----------------------------------+-----------+
104
| | ``BPF_TRACE_KPROBE_MULTI`` | ``kprobe.multi+`` [#kpmulti]_ | |
105
+ + +----------------------------------+-----------+
106
| | | ``kretprobe.multi+`` [#kpmulti]_ | |
107
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
108
| ``BPF_PROG_TYPE_LIRC_MODE2`` | ``BPF_LIRC_MODE2`` | ``lirc_mode2`` | |
109
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
110
| ``BPF_PROG_TYPE_LSM`` | ``BPF_LSM_CGROUP`` | ``lsm_cgroup+`` | |
111
+ +----------------------------------------+----------------------------------+-----------+
112
| | ``BPF_LSM_MAC`` | ``lsm+`` [#lsm]_ | |
113
+ + +----------------------------------+-----------+
114
| | | ``lsm.s+`` [#lsm]_ | Yes |
115
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
116
| ``BPF_PROG_TYPE_LWT_IN`` | | ``lwt_in`` | |
117
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
118
| ``BPF_PROG_TYPE_LWT_OUT`` | | ``lwt_out`` | |
119
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
120
| ``BPF_PROG_TYPE_LWT_SEG6LOCAL`` | | ``lwt_seg6local`` | |
121
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
122
| ``BPF_PROG_TYPE_LWT_XMIT`` | | ``lwt_xmit`` | |
123
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
124
| ``BPF_PROG_TYPE_NETFILTER`` | | ``netfilter`` | |
125
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
126
| ``BPF_PROG_TYPE_PERF_EVENT`` | | ``perf_event`` | |
127
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
128
| ``BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE`` | | ``raw_tp.w+`` [#rawtp]_ | |
129
+ + +----------------------------------+-----------+
130
| | | ``raw_tracepoint.w+`` | |
131
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
132
| ``BPF_PROG_TYPE_RAW_TRACEPOINT`` | | ``raw_tp+`` [#rawtp]_ | |
133
+ + +----------------------------------+-----------+
134
| | | ``raw_tracepoint+`` | |
135
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
136
| ``BPF_PROG_TYPE_SCHED_ACT`` | | ``action`` [#tc_legacy]_ | |
137
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
138
| ``BPF_PROG_TYPE_SCHED_CLS`` | | ``classifier`` [#tc_legacy]_ | |
139
+ + +----------------------------------+-----------+
140
| | | ``tc`` [#tc_legacy]_ | |
141
+ +----------------------------------------+----------------------------------+-----------+
142
| | ``BPF_NETKIT_PRIMARY`` | ``netkit/primary`` | |
143
+ +----------------------------------------+----------------------------------+-----------+
144
| | ``BPF_NETKIT_PEER`` | ``netkit/peer`` | |
145
+ +----------------------------------------+----------------------------------+-----------+
146
| | ``BPF_TCX_INGRESS`` | ``tc/ingress`` | |
147
+ +----------------------------------------+----------------------------------+-----------+
148
| | ``BPF_TCX_EGRESS`` | ``tc/egress`` | |
149
+ +----------------------------------------+----------------------------------+-----------+
150
| | ``BPF_TCX_INGRESS`` | ``tcx/ingress`` | |
151
+ +----------------------------------------+----------------------------------+-----------+
152
| | ``BPF_TCX_EGRESS`` | ``tcx/egress`` | |
153
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
154
| ``BPF_PROG_TYPE_SK_LOOKUP`` | ``BPF_SK_LOOKUP`` | ``sk_lookup`` | |
155
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
156
| ``BPF_PROG_TYPE_SK_MSG`` | ``BPF_SK_MSG_VERDICT`` | ``sk_msg`` | |
157
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
158
| ``BPF_PROG_TYPE_SK_REUSEPORT`` | ``BPF_SK_REUSEPORT_SELECT_OR_MIGRATE`` | ``sk_reuseport/migrate`` | |
159
+ +----------------------------------------+----------------------------------+-----------+
160
| | ``BPF_SK_REUSEPORT_SELECT`` | ``sk_reuseport`` | |
161
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
162
| ``BPF_PROG_TYPE_SK_SKB`` | | ``sk_skb`` | |
163
+ +----------------------------------------+----------------------------------+-----------+
164
| | ``BPF_SK_SKB_STREAM_PARSER`` | ``sk_skb/stream_parser`` | |
165
+ +----------------------------------------+----------------------------------+-----------+
166
| | ``BPF_SK_SKB_STREAM_VERDICT`` | ``sk_skb/stream_verdict`` | |
167
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
168
| ``BPF_PROG_TYPE_SOCKET_FILTER`` | | ``socket`` | |
169
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
170
| ``BPF_PROG_TYPE_SOCK_OPS`` | ``BPF_CGROUP_SOCK_OPS`` | ``sockops`` | |
171
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
172
| ``BPF_PROG_TYPE_STRUCT_OPS`` | | ``struct_ops+`` [#struct_ops]_ | |
173
+ + +----------------------------------+-----------+
174
| | | ``struct_ops.s+`` [#struct_ops]_ | Yes |
175
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
176
| ``BPF_PROG_TYPE_SYSCALL`` | | ``syscall`` | Yes |
177
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
178
| ``BPF_PROG_TYPE_TRACEPOINT`` | | ``tp+`` [#tp]_ | |
179
+ + +----------------------------------+-----------+
180
| | | ``tracepoint+`` [#tp]_ | |
181
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
182
| ``BPF_PROG_TYPE_TRACING`` | ``BPF_MODIFY_RETURN`` | ``fmod_ret+`` [#fentry]_ | |
183
+ + +----------------------------------+-----------+
184
| | | ``fmod_ret.s+`` [#fentry]_ | Yes |
185
+ +----------------------------------------+----------------------------------+-----------+
186
| | ``BPF_TRACE_FENTRY`` | ``fentry+`` [#fentry]_ | |
187
+ + +----------------------------------+-----------+
188
| | | ``fentry.s+`` [#fentry]_ | Yes |
189
+ +----------------------------------------+----------------------------------+-----------+
190
| | ``BPF_TRACE_FEXIT`` | ``fexit+`` [#fentry]_ | |
191
+ + +----------------------------------+-----------+
192
| | | ``fexit.s+`` [#fentry]_ | Yes |
193
+ +----------------------------------------+----------------------------------+-----------+
194
| | ``BPF_TRACE_ITER`` | ``iter+`` [#iter]_ | |
195
+ + +----------------------------------+-----------+
196
| | | ``iter.s+`` [#iter]_ | Yes |
197
+ +----------------------------------------+----------------------------------+-----------+
198
| | ``BPF_TRACE_RAW_TP`` | ``tp_btf+`` [#fentry]_ | |
199
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
200
| ``BPF_PROG_TYPE_XDP`` | ``BPF_XDP_CPUMAP`` | ``xdp.frags/cpumap`` | |
201
+ + +----------------------------------+-----------+
202
| | | ``xdp/cpumap`` | |
203
+ +----------------------------------------+----------------------------------+-----------+
204
| | ``BPF_XDP_DEVMAP`` | ``xdp.frags/devmap`` | |
205
+ + +----------------------------------+-----------+
206
| | | ``xdp/devmap`` | |
207
+ +----------------------------------------+----------------------------------+-----------+
208
| | ``BPF_XDP`` | ``xdp.frags`` | |
209
+ + +----------------------------------+-----------+
210
| | | ``xdp`` | |
211
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
214
.. rubric:: Footnotes
216
.. [#fentry] The ``fentry`` attach format is ``fentry[.s]/<function>``.
217
.. [#kprobe] The ``kprobe`` attach format is ``kprobe/<function>[+<offset>]``. Valid
218
characters for ``function`` are ``a-zA-Z0-9_.`` and ``offset`` must be a valid
219
non-negative integer.
220
.. [#ksyscall] The ``ksyscall`` attach format is ``ksyscall/<syscall>``.
221
.. [#uprobe] The ``uprobe`` attach format is ``uprobe[.s]/<path>:<function>[+<offset>]``.
222
.. [#usdt] The ``usdt`` attach format is ``usdt/<path>:<provider>:<name>``.
223
.. [#kpmulti] The ``kprobe.multi`` attach format is ``kprobe.multi/<pattern>`` where ``pattern``
224
supports ``*`` and ``?`` wildcards. Valid characters for pattern are
225
``a-zA-Z0-9_.*?``.
226
.. [#lsm] The ``lsm`` attachment format is ``lsm[.s]/<hook>``.
227
.. [#rawtp] The ``raw_tp`` attach format is ``raw_tracepoint[.w]/<tracepoint>``.
228
.. [#tc_legacy] The ``tc``, ``classifier`` and ``action`` attach types are deprecated, use
229
``tcx/*`` instead.
230
.. [#struct_ops] The ``struct_ops`` attach format supports ``struct_ops[.s]/<name>`` convention,
231
but ``name`` is ignored and it is recommended to just use plain
232
``SEC("struct_ops[.s]")``. The attachments are defined in a struct initializer
233
that is tagged with ``SEC(".struct_ops[.link]")``.
234
.. [#tp] The ``tracepoint`` attach format is ``tracepoint/<category>/<name>``.
235
.. [#iter] The ``iter`` attach format is ``iter[.s]/<struct-name>``.
3. 한국어 전문 번역
영어 원문의 문단 순서와 의미를 유지한 전체 번역입니다. 코드, 함수명, symbol과 URL은 원문 표기를 유지합니다.
Program type과 ELF section 규칙
1-20`Program Types and ELF Sections` 문서는 `(LGPL-2.1 OR BSD-2-Clause)` license를 따르며 `_program_types_and_elf` reference target을 정의합니다. 아래 표는 libbpf가 지원하는 BPF program type, 해당되는 attach type, ELF section name, sleepable 여부를 정리합니다.
ELF section name 표기는 다음 규칙을 따릅니다.
- `type`은 exact match입니다. 예를 들어 `SEC("socket")`은 정확히 `socket` section을 뜻합니다.
- `type+`는 정확한 `SEC("type")` 또는 `type`과 `extras`를 `/` separator로 나눈 올바른 `SEC("type/extras")` 형식을 모두 허용합니다.
`extras`를 지정하면 BPF program을 auto-attach하는 방법의 세부 정보를 전달합니다. 형식은 program type에 따라 달라서 tracepoint는 `SEC("tracepoint/<category>/<name>")`, USDT probe는 `SEC("usdt/<path>:<provider>:<name>")`을 사용합니다. 각 extras 형식은 문서 끝의 footnote에서 자세히 설명합니다.
Program type, attach type, ELF section 대응표
21-213표의 `Program Type`은 kernel BPF program type, `Attach Type`은 연결 방식, `ELF Section Name`은 libbpf가 type과 auto-attach 정보를 판별하는 section name, `Sleepable`은 sleepable program 허용 여부를 뜻합니다. 비어 있는 attach type은 별도 attach type을 요구하지 않으며 `Yes`가 있는 행만 sleepable variant입니다.
Symbol, section spelling, footnote reference, merged-cell 관계를 잃지 않도록 원문의 구조화 표를 아래에 그대로 보존합니다.
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| Program Type | Attach Type | ELF Section Name | Sleepable |
+===========================================+========================================+==================================+===========+
| ``BPF_PROG_TYPE_CGROUP_DEVICE`` | ``BPF_CGROUP_DEVICE`` | ``cgroup/dev`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_CGROUP_SKB`` | | ``cgroup/skb`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET_EGRESS`` | ``cgroup_skb/egress`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET_INGRESS`` | ``cgroup_skb/ingress`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_CGROUP_SOCKOPT`` | ``BPF_CGROUP_GETSOCKOPT`` | ``cgroup/getsockopt`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_SETSOCKOPT`` | ``cgroup/setsockopt`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_CGROUP_SOCK_ADDR`` | ``BPF_CGROUP_INET4_BIND`` | ``cgroup/bind4`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET4_CONNECT`` | ``cgroup/connect4`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET4_GETPEERNAME`` | ``cgroup/getpeername4`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET4_GETSOCKNAME`` | ``cgroup/getsockname4`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET6_BIND`` | ``cgroup/bind6`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET6_CONNECT`` | ``cgroup/connect6`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET6_GETPEERNAME`` | ``cgroup/getpeername6`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET6_GETSOCKNAME`` | ``cgroup/getsockname6`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_UDP4_RECVMSG`` | ``cgroup/recvmsg4`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_UDP4_SENDMSG`` | ``cgroup/sendmsg4`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_UDP6_RECVMSG`` | ``cgroup/recvmsg6`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_UDP6_SENDMSG`` | ``cgroup/sendmsg6`` | |
| +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_UNIX_CONNECT`` | ``cgroup/connect_unix`` | |
| +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_UNIX_SENDMSG`` | ``cgroup/sendmsg_unix`` | |
| +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_UNIX_RECVMSG`` | ``cgroup/recvmsg_unix`` | |
| +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_UNIX_GETPEERNAME`` | ``cgroup/getpeername_unix`` | |
| +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_UNIX_GETSOCKNAME`` | ``cgroup/getsockname_unix`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_CGROUP_SOCK`` | ``BPF_CGROUP_INET4_POST_BIND`` | ``cgroup/post_bind4`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET6_POST_BIND`` | ``cgroup/post_bind6`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET_SOCK_CREATE`` | ``cgroup/sock_create`` | |
+ + +----------------------------------+-----------+
| | | ``cgroup/sock`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_CGROUP_INET_SOCK_RELEASE`` | ``cgroup/sock_release`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_CGROUP_SYSCTL`` | ``BPF_CGROUP_SYSCTL`` | ``cgroup/sysctl`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_EXT`` | | ``freplace+`` [#fentry]_ | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_FLOW_DISSECTOR`` | ``BPF_FLOW_DISSECTOR`` | ``flow_dissector`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_KPROBE`` | | ``kprobe+`` [#kprobe]_ | |
+ + +----------------------------------+-----------+
| | | ``kretprobe+`` [#kprobe]_ | |
+ + +----------------------------------+-----------+
| | | ``ksyscall+`` [#ksyscall]_ | |
+ + +----------------------------------+-----------+
| | | ``kretsyscall+`` [#ksyscall]_ | |
+ + +----------------------------------+-----------+
| | | ``uprobe+`` [#uprobe]_ | |
+ + +----------------------------------+-----------+
| | | ``uprobe.s+`` [#uprobe]_ | Yes |
+ + +----------------------------------+-----------+
| | | ``uretprobe+`` [#uprobe]_ | |
+ + +----------------------------------+-----------+
| | | ``uretprobe.s+`` [#uprobe]_ | Yes |
+ + +----------------------------------+-----------+
| | | ``usdt+`` [#usdt]_ | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_TRACE_KPROBE_MULTI`` | ``kprobe.multi+`` [#kpmulti]_ | |
+ + +----------------------------------+-----------+
| | | ``kretprobe.multi+`` [#kpmulti]_ | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_LIRC_MODE2`` | ``BPF_LIRC_MODE2`` | ``lirc_mode2`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_LSM`` | ``BPF_LSM_CGROUP`` | ``lsm_cgroup+`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_LSM_MAC`` | ``lsm+`` [#lsm]_ | |
+ + +----------------------------------+-----------+
| | | ``lsm.s+`` [#lsm]_ | Yes |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_LWT_IN`` | | ``lwt_in`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_LWT_OUT`` | | ``lwt_out`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_LWT_SEG6LOCAL`` | | ``lwt_seg6local`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_LWT_XMIT`` | | ``lwt_xmit`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_NETFILTER`` | | ``netfilter`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_PERF_EVENT`` | | ``perf_event`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE`` | | ``raw_tp.w+`` [#rawtp]_ | |
+ + +----------------------------------+-----------+
| | | ``raw_tracepoint.w+`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_RAW_TRACEPOINT`` | | ``raw_tp+`` [#rawtp]_ | |
+ + +----------------------------------+-----------+
| | | ``raw_tracepoint+`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_SCHED_ACT`` | | ``action`` [#tc_legacy]_ | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_SCHED_CLS`` | | ``classifier`` [#tc_legacy]_ | |
+ + +----------------------------------+-----------+
| | | ``tc`` [#tc_legacy]_ | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_NETKIT_PRIMARY`` | ``netkit/primary`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_NETKIT_PEER`` | ``netkit/peer`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_TCX_INGRESS`` | ``tc/ingress`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_TCX_EGRESS`` | ``tc/egress`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_TCX_INGRESS`` | ``tcx/ingress`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_TCX_EGRESS`` | ``tcx/egress`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_SK_LOOKUP`` | ``BPF_SK_LOOKUP`` | ``sk_lookup`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_SK_MSG`` | ``BPF_SK_MSG_VERDICT`` | ``sk_msg`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_SK_REUSEPORT`` | ``BPF_SK_REUSEPORT_SELECT_OR_MIGRATE`` | ``sk_reuseport/migrate`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_SK_REUSEPORT_SELECT`` | ``sk_reuseport`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_SK_SKB`` | | ``sk_skb`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_SK_SKB_STREAM_PARSER`` | ``sk_skb/stream_parser`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_SK_SKB_STREAM_VERDICT`` | ``sk_skb/stream_verdict`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_SOCKET_FILTER`` | | ``socket`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_SOCK_OPS`` | ``BPF_CGROUP_SOCK_OPS`` | ``sockops`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_STRUCT_OPS`` | | ``struct_ops+`` [#struct_ops]_ | |
+ + +----------------------------------+-----------+
| | | ``struct_ops.s+`` [#struct_ops]_ | Yes |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_SYSCALL`` | | ``syscall`` | Yes |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_TRACEPOINT`` | | ``tp+`` [#tp]_ | |
+ + +----------------------------------+-----------+
| | | ``tracepoint+`` [#tp]_ | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_TRACING`` | ``BPF_MODIFY_RETURN`` | ``fmod_ret+`` [#fentry]_ | |
+ + +----------------------------------+-----------+
| | | ``fmod_ret.s+`` [#fentry]_ | Yes |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_TRACE_FENTRY`` | ``fentry+`` [#fentry]_ | |
+ + +----------------------------------+-----------+
| | | ``fentry.s+`` [#fentry]_ | Yes |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_TRACE_FEXIT`` | ``fexit+`` [#fentry]_ | |
+ + +----------------------------------+-----------+
| | | ``fexit.s+`` [#fentry]_ | Yes |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_TRACE_ITER`` | ``iter+`` [#iter]_ | |
+ + +----------------------------------+-----------+
| | | ``iter.s+`` [#iter]_ | Yes |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_TRACE_RAW_TP`` | ``tp_btf+`` [#fentry]_ | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+
| ``BPF_PROG_TYPE_XDP`` | ``BPF_XDP_CPUMAP`` | ``xdp.frags/cpumap`` | |
+ + +----------------------------------+-----------+
| | | ``xdp/cpumap`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_XDP_DEVMAP`` | ``xdp.frags/devmap`` | |
+ + +----------------------------------+-----------+
| | | ``xdp/devmap`` | |
+ +----------------------------------------+----------------------------------+-----------+
| | ``BPF_XDP`` | ``xdp.frags`` | |
+ + +----------------------------------+-----------+
| | | ``xdp`` | |
+-------------------------------------------+----------------------------------------+----------------------------------+-----------+Attach format footnote
214-235표의 footnote는 `type+` section에서 extras를 작성하는 정확한 형식과 제한을 다음과 같이 정의합니다.
- `fentry`: attach format은 `fentry[.s]/<function>`입니다.
- `kprobe`: attach format은 `kprobe/<function>[+<offset>]`입니다. `function`에는 `a-zA-Z0-9_.`만 사용할 수 있고 `offset`은 유효한 non-negative integer여야 합니다.
- `ksyscall`: attach format은 `ksyscall/<syscall>`입니다.
- `uprobe`: attach format은 `uprobe[.s]/<path>:<function>[+<offset>]`입니다.
- `usdt`: attach format은 `usdt/<path>:<provider>:<name>`입니다.
- `kpmulti`: attach format은 `kprobe.multi/<pattern>`입니다. `pattern`은 `*`와 `?` wildcard를 지원하며 유효한 문자는 `a-zA-Z0-9_.*?`입니다.
- `lsm`: attachment format은 `lsm[.s]/<hook>`입니다.
- `rawtp`: attach format은 `raw_tracepoint[.w]/<tracepoint>`입니다.
- `tc_legacy`: `tc`, `classifier`, `action` attach type은 deprecated되었으므로 `tcx/*`를 사용합니다.
- `struct_ops`: `struct_ops[.s]/<name>` convention을 지원하지만 `name`은 무시됩니다. Plain `SEC("struct_ops[.s]")` 사용을 권장하며 attachment는 `SEC(".struct_ops[.link]")` tag가 붙은 struct initializer에 정의합니다.
- `tp`: tracepoint attach format은 `tracepoint/<category>/<name>`입니다.
- `iter`: attach format은 `iter[.s]/<struct-name>`입니다.
요약과 해설
program_types.rst:1-235Libbpf는 ELF section name으로 BPF program type과 auto-attach 방식을 판별합니다. Exact `type`과 extras를 허용하는 `type+` 표기를 구분하며, slash 뒤 extras에는 function, tracepoint, path, provider 같은 attach 대상 정보가 들어갑니다.
대응표는 cgroup, kprobe, LSM, raw tracepoint, TC, socket, tracing, XDP 등 program type별 attach type과 section name을 보존합니다. `.s` variant나 Sleepable 열의 `Yes`는 sleepable program을 나타냅니다.
Footnote는 kprobe offset, multi-kprobe wildcard, deprecated legacy TC section, struct_ops initializer 등 각 section family의 정확한 문법과 제약을 정의합니다.