Ozan Sazak

An Applied Introduction to eBPF with Go

What if you could reprogram the Linux kernel in minutes, without a reboot? Learn how to build powerful system tools with Go and eBPF.

An Applied Introduction to eBPF with Go
#1about 2 minutes

What is eBPF and why should you use it

eBPF allows you to run custom sandboxed code inside the Linux kernel without modifying kernel source code or loading modules.

#2about 3 minutes

Understanding user space versus kernel space architecture

An operating system is divided into user space for applications and kernel space for core functions, with system calls acting as the interface.

#3about 2 minutes

Why eBPF is better than traditional kernel programming

eBPF provides a safer and more dynamic way to run code in the kernel compared to recompiling the kernel or writing unstable kernel modules.

#4about 2 minutes

How the eBPF architecture and workflow operates

An eBPF program written in C is compiled to bytecode, loaded into the kernel, and executed by a virtual machine when a specific event occurs.

#5about 3 minutes

Writing an eBPF program in C to trace processes

This code walkthrough demonstrates how to write a C program that uses a ring buffer map to capture process ID and name on creation.

#6about 3 minutes

Loading the eBPF program with a Go user space application

Learn how to use the Cilium eBPF library in Go to generate bindings, load the eBPF object, and attach it to a kernel probe (Kprobe).

#7about 3 minutes

A deeper look at eBPF hooks and maps

Understand the role of different hook types like Kprobes and map types like ring buffers for attaching to events and sharing data.

#8about 5 minutes

Tracing network packets at the driver level with XDP

This example shows how to use an XDP hook and an LRU hash map to efficiently count incoming IP packets directly from the network interface.

#9about 2 minutes

Exploring real-world eBPF projects and use cases

Discover how open-source projects like Cilium and companies like Edge Delta use eBPF for Kubernetes networking, security, and observability.

Related jobs
Jobs that call for the skills explored in this talk.

Matching moments

Using eBPF to observe and secure container networking
12:01 MIN

Using eBPF to observe and secure container networking

A Hitchhikers Guide to Container Security - Automotive Edition 2024

Practical use cases and libraries for eBPF development
19:56 MIN

Practical use cases and libraries for eBPF development

Into the hive of eBPF!

Understanding the offensive potential of eBPF rootkits
19:29 MIN

Understanding the offensive potential of eBPF rootkits

A Hitchhikers Guide to Container Security - Automotive Edition 2024

The eBPF ecosystem, tooling, and future trends
23:28 MIN

The eBPF ecosystem, tooling, and future trends

Into the hive of eBPF!

Introducing eBPF as a kernel programmability solution
01:24 MIN

Introducing eBPF as a kernel programmability solution

Gentle Introduction to eBPF

Popular projects and companies using eBPF
07:07 MIN

Popular projects and companies using eBPF

Gentle Introduction to eBPF

Core components of an eBPF program
14:56 MIN

Core components of an eBPF program

Into the hive of eBPF!

How eBPF programs are event-driven and written
02:16 MIN

How eBPF programs are event-driven and written

Gentle Introduction to eBPF

Featured Partners

Related Videos

See all videos
Gentle Introduction to eBPF09:03

Gentle Introduction to eBPF

Ayesha Kaleem

Into the hive of eBPF!28:20

Into the hive of eBPF!

Mohammed Aboullaite

WebAssembly Revolution: Elevating JavaScript's Reach and Performance30:57

WebAssembly Revolution: Elevating JavaScript's Reach and Performance

Önder Ceylan

Why and when should we consider Stream Processing frameworks in our solutions30:51

Why and when should we consider Stream Processing frameworks in our solutions

Soroosh Khodami

F#, path to functional enlightenment29:15

F#, path to functional enlightenment

Onur Gumus

WebAssembly: The Next Frontier of Cloud Computing30:58

WebAssembly: The Next Frontier of Cloud Computing

Edoardo Dusi

A Hitchhikers Guide to Container Security - Automotive Edition 202421:49

A Hitchhikers Guide to Container Security - Automotive Edition 2024

Reinhard Kugler

From Factory Floor to Kubernetes Core: Building an Edge Platform One Step at a Time17:34

From Factory Floor to Kubernetes Core: Building an Edge Platform One Step at a Time

Dean Oren & Stefan Belsch

From learning to earning

Jobs that call for the skills explored in this talk.

Rust and GoLang

Rust and GoLang

NHe4a GmbH
Karlsruhe, Germany

Remote
€55-65K
Intermediate
Senior
Go
Rust