WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2024 • Aug 20, 2024 • Session details

An Applied Introduction to eBPF with Go

Ozan Sazak

Kernel-level visibility used to require risky, fragile modules. Now, eBPF and Go allow you to safely build virtually zero-overhead observability tools directly inside the Linux kernel.

Pause
Mute Enter Fullscreen
#1 about 3 min

Overview of eBPF and Edge Delta observability pipelines

The ebpf technology provides a surface to execute isolated custom code safely inside a live Linux kernel.

#2 about 4 min

Defining eBPF and operating system abstraction layers

User space applications communicate directly with operating system kernel resources using explicit system call interfaces.

#3 about 4 min

Comparing kernel modules with eBPF for system tracing

Injecting bytecode dynamically provides a much safer and faster alternative than deploying permanent kernel driver modules.

#4 about 2 min

Architecture and execution lifecycle of eBPF programs

The execution architecture relies heavily on just-in-time compilers translating code for isolated kernel virtual machines.

#5 about 4 min

Writing a simple eBPF kernel space program in C

Adding standardized C header files alongside ring buffer maps allows the capture of process identification details.

#6 about 4 min

Loading eBPF modules using a Go user space program

Generating dedicated Go code bindings helps developers compile and insert custom objects into active kernel memory workspaces.

#7 about 4 min

Tracing process generation with kernel probe system calls

Attaching eBPF kernel probes natively against explicit execution apis tracks underlying application runtime activity accurately.

#8 about 2 min

Intercepting network traffic with an XDP kernel hook

XDP hooks bypass ordinary socket abstractions to inspect raw incoming hardware packets prior to entering standard routing layers.

#9 about 3 min

Tracking IP packet counts with an eBPF hash map

A native byte parser extracts fundamental IP metadata properties to tally continuous inbound traffic metrics using dictionary tables.

#10 about 2 min

Attaching custom network packet filters to hardware interfaces

Attaching configured filter instances manually to specific host network channels enforces real-time protocol traffic analysis operations.

#11 about 2 min

Real-world observability applications and Cilium integration patterns

Ecosystem tools like Cilium process dynamic enterprise cluster networking patterns while agents monitor local infrastructure node metrics.

Matching moments

1:33 min

Practical use cases covering networking and performance profiling

Mohammed Aboullaite Mohammed Aboullaite · WWC 2024

1:41 min

Introduction to the growing popularity of eBPF

Mohammed Aboullaite Mohammed Aboullaite · WWC 2024

39 sec

Attaching eBPF programs to event-driven kernel hooks

Ayesha Kaleem · WWC 2023

52 sec

Introduction to eBPF as a secure virtual machine

Ayesha Kaleem · WWC 2023

2:13 min

Ecosystem of tooling and future capabilities of eBPF

Mohammed Aboullaite Mohammed Aboullaite · WWC 2024

2:04 min

Writing eBPF programs using BCC and bpftrace libraries

Ayesha Kaleem · WWC 2023

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail
24:07
10 months ago

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher, Jürgen Müller, Katrin Lehmann, Tobias Regenfuss

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail
21:17
almost 2 years ago

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail
31:50
almost 2 years ago

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail
29:43
almost 2 years ago

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush

Dapr in Practice thumbnail
24:08
almost 2 years ago

Dapr in Practice

marcklefter

Minimising the Carbon Footprint of Workloads thumbnail
27:46
almost 2 years ago

Minimising the Carbon Footprint of Workloads

Michael Mueller

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Honey, look! I vibe-coded an OS!

Ian Smith

CTO, LYOS

Ian Smith
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Bluesky's Open Source Moderation Tools: LLM-based Event Detection in Python

Alex Garnett

Developer Relations, Bluesky

Alex Garnett
Open session

World Congress 2026 North America

Your Evals Passed. Your Agent Just Emptied a Database.

Tejas Pravinbhai Patel

IEEE Award-Winning Researcher | Best Keynote Speaker | Sr. Software Engineer at Amazon | AI Systems & Agent Architect

Tejas Pravinbhai Patel
Open session

World Congress 2026 North America

When Logging Becomes The Outage: Escaping the ECS Logging Trap

Rahul Tanniru

Senior Vice President Of Software Engineering, Jp Morgan Chase

Rahul Tanniru
Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp

Related videos

Into the hive of eBPF! thumbnail
28:20
WWC 2024 • almost 2 years ago

Into the hive of eBPF!

Mohammed Aboullaite

Gentle Introduction to eBPF thumbnail
9:03
WWC 2023 • almost 3 years ago

Gentle Introduction to eBPF

Ayesha Kaleem

A Hitchhikers Guide to Container Security - Automotive Edition 2024 thumbnail
21:49
WWC 2024 • almost 2 years ago

A Hitchhikers Guide to Container Security - Automotive Edition 2024

Reinhard

Observability with OpenTelemetry & Elastic thumbnail
30:29
LIVE • almost 2 years ago

Observability with OpenTelemetry & Elastic

Iulia Feroli

Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves thumbnail
31:32
WWC Europe 2026 • about 1 month ago

Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves

Jan Mensch

Docker exec without Docker thumbnail
29:16
WWC 2024 • almost 2 years ago

Docker exec without Docker

Oliver Seitz

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.