WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2024 • Aug 20, 2024 • Session details

An Applied Introduction to eBPF with Go

Ozan Sazak

Kernel-level visibility used to require risky, fragile modules. Now, eBPF and Go allow you to safely build virtually zero-overhead observability tools directly inside the Linux kernel.

Pause
Mute Enter Fullscreen
#1 about 3 min

Overview of eBPF and Edge Delta observability pipelines

The ebpf technology provides a surface to execute isolated custom code safely inside a live Linux kernel.

#2 about 4 min

Defining eBPF and operating system abstraction layers

User space applications communicate directly with operating system kernel resources using explicit system call interfaces.

#3 about 4 min

Comparing kernel modules with eBPF for system tracing

Injecting bytecode dynamically provides a much safer and faster alternative than deploying permanent kernel driver modules.

#4 about 2 min

Architecture and execution lifecycle of eBPF programs

The execution architecture relies heavily on just-in-time compilers translating code for isolated kernel virtual machines.

#5 about 4 min

Writing a simple eBPF kernel space program in C

Adding standardized C header files alongside ring buffer maps allows the capture of process identification details.

#6 about 4 min

Loading eBPF modules using a Go user space program

Generating dedicated Go code bindings helps developers compile and insert custom objects into active kernel memory workspaces.

#7 about 4 min

Tracing process generation with kernel probe system calls

Attaching eBPF kernel probes natively against explicit execution apis tracks underlying application runtime activity accurately.

#8 about 2 min

Intercepting network traffic with an XDP kernel hook

XDP hooks bypass ordinary socket abstractions to inspect raw incoming hardware packets prior to entering standard routing layers.

#9 about 3 min

Tracking IP packet counts with an eBPF hash map

A native byte parser extracts fundamental IP metadata properties to tally continuous inbound traffic metrics using dictionary tables.

#10 about 2 min

Attaching custom network packet filters to hardware interfaces

Attaching configured filter instances manually to specific host network channels enforces real-time protocol traffic analysis operations.

#11 about 2 min

Real-world observability applications and Cilium integration patterns

Ecosystem tools like Cilium process dynamic enterprise cluster networking patterns while agents monitor local infrastructure node metrics.

Matching moments

1:33 min

Practical use cases covering networking and performance profiling

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

1:41 min

Introduction to the growing popularity of eBPF

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

39 sec

Attaching eBPF programs to event-driven kernel hooks

Ayesha Kaleem · World Congress 2023

52 sec

Introduction to eBPF as a secure virtual machine

Ayesha Kaleem · World Congress 2023

2:13 min

Ecosystem of tooling and future capabilities of eBPF

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

2:04 min

Writing eBPF programs using BCC and bpftrace libraries

Ayesha Kaleem · World Congress 2023

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail
24:07
11 months ago

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher, Jürgen Müller, Katrin Lehmann, Tobias Regenfuss

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail
21:17
almost 2 years ago

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail
31:50
about 2 years ago

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail
29:43
about 2 years ago

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush

Dapr in Practice thumbnail
24:08
about 2 years ago

Dapr in Practice

marcklefter

Minimising the Carbon Footprint of Workloads thumbnail
27:46
about 2 years ago

Minimising the Carbon Footprint of Workloads

Michael Mueller

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 25, 2026 · 11:00–11:30

Outdoor Stage

Loop Engineering: Designing and Observing the Loops That Run Your Agents With Opik

Abigail Morgan

AI Developer Advocate at Comet

Abigail Morgan
Open session

World Congress 2026 North America

September 25, 2026 · 15:30–16:00

Mainstage

One Boundary for the Agentic Era

Mark Lechner

Chief Information Security Officer of Docker

Mark Lechner
Open session

World Congress 2026 North America

September 25, 2026 · 16:50–17:20

Stage 1

Honey, look! I vibe-coded an OS!

Ian Smith

CTO of LYOS

Ian Smith
Open session

World Congress 2026 North America

September 25, 2026 · 13:30–14:00

Stage 9

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

September 25, 2026 · 13:30–14:00

Stage 2

Bluesky's Open Source Moderation Tools: LLM-based Event Detection in Python

Alex Garnett

Developer Relations, Bluesky

Alex Garnett
Open session

World Congress 2026 North America

September 23, 2026 · 10:45–12:45

Stage 8

SBX 101: Hands-on with Docker Sandboxes

Dan Ndombe

Developer Success, Docker

Dan Ndombe

Related videos

Into the hive of eBPF! thumbnail
28:20
World Congress 2024 • about 2 years ago

Into the hive of eBPF!

Mohammed Aboullaite

Gentle Introduction to eBPF thumbnail
9:03
World Congress 2023 • almost 3 years ago

Gentle Introduction to eBPF

Ayesha Kaleem

A Hitchhikers Guide to Container Security - Automotive Edition 2024 thumbnail
21:49
World Congress 2024 • about 2 years ago

A Hitchhikers Guide to Container Security - Automotive Edition 2024

Reinhard

Observability with OpenTelemetry & Elastic thumbnail
30:29
LIVE • almost 2 years ago

Observability with OpenTelemetry & Elastic

Iulia Feroli

Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves thumbnail
31:32
World Congress 2026 Europe • about 2 months ago

Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves

Jan Mensch

Docker exec without Docker thumbnail
29:16
World Congress 2024 • about 2 years ago

Docker exec without Docker

Oliver Seitz

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.