WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2024 • Aug 29, 2024 • Session details

Into the hive of eBPF!

Mohammed Aboullaite

Tired of waiting years for upstream kernel updates? Learn how eBPF securely runs sandboxed code directly within Linux, enabling instant zero-day patching and high-performance networking without system restarts.

Pause
Mute Enter Fullscreen
#1 about 2 min

Introduction to the growing popularity of eBPF

Background on why cloud native communities are increasingly discussing eBPF technologies.

#2 about 3 min

Origins and evolution of Berkeley packet filter

The transition from static socket packet filtering to extended Berkeley packet filter execution.

#3 about 2 min

Role of the Linux kernel in handling processes

Understand how common high level commands invoke hundreds of complex kernel system calls.

#4 about 2 min

Challenges involved in extending historical kernel functionality

The friction in proposing upstream kernel patches versus maintaining unstable standalone kernel modules.

#5 about 2 min

Making the Linux kernel programmable with sandboxed execution

How eBPF provides a highly effective virtual machine to safely execute code natively in the kernel.

#6 about 3 min

Compiling and verifying bytecode for safe kernel execution

The execution pipeline compiles C or Rust into verified bytecode before just-in-time compilation runs it natively.

#7 about 2 min

Continuous delivery of eBPF using the BCC library

Modifying a Python based eBPF tracing script on the fly demonstrates live updates without restarting the kernel.

#8 about 2 min

Core benefits of secure eBPF APIs

The architecture enables high efficiency, continuous delivery, and long-term stable kernel APIs without compromising system security.

#9 about 3 min

Attaching programs to network events via kernel hooks

Event-driven eBPF processes bind to kprobes, tracepoints, and XDP interfaces to seamlessly handle network packets.

#10 about 2 min

Exchanging persistent information with eBPF maps and helpers

Key value maps safely bridge kernel and user space while helper functions provide crucial utility capabilities.

#11 about 2 min

Improving composability using eBPF functions and tail calls

Chaining tail calls links multiple execution blocks together to context-switch through complex programmable routing paths.

#12 about 2 min

Practical use cases covering networking and performance profiling

Leveraging eBPF non-intrusively tracks processes, optimizes traffic drops, and enforces cloud native security policies.

#13 about 1 min

Comparing runtime libraries for C Go and Rust

High level bindings facilitate building loaders and logic for tools like Aya or BCC using popular programming languages.

#14 about 2 min

Solving cross kernel portability via BTF type definitions

CO-RE methodologies embed offset intelligence so single binaries run appropriately across diverse historical kernel versions.

#15 about 1 min

Evaluating appropriate use cases for eBPF offloading routines

Bypassing heavy CPU tasks ensures the system stays highly responsive while maximizing load balancing wins.

#16 about 3 min

Ecosystem of tooling and future capabilities of eBPF

Open source projects leverage kernel bypass routing to reduce sidecar application latency and dynamically apply remote security patches.

#17 about 2 min

Addressing execution priority overhead and bytecode security concerns

Handling overlapping kernel hook priorities natively comes with measured enterprise compute overhead around two percent.

Matching moments

52 sec

Introduction to eBPF as a secure virtual machine

Ayesha Kaleem · World Congress 2023

2:04 min

Writing eBPF programs using BCC and bpftrace libraries

Ayesha Kaleem · World Congress 2023

1:18 min

Architecture and execution lifecycle of eBPF programs

Ozan Sazak Ozan Sazak · World Congress 2024

39 sec

Attaching eBPF programs to event-driven kernel hooks

Ayesha Kaleem · World Congress 2023

2:27 min

Overview of eBPF and Edge Delta observability pipelines

Ozan Sazak Ozan Sazak · World Congress 2024

2:08 min

Protecting hardware access controls using eBPF security hooks

Reinhard Reinhard · World Congress 2024

More from World Congress 2024

Beyond the Hype: Real-World AI Strategies Panel thumbnail
24:07
11 months ago

Beyond the Hype: Real-World AI Strategies Panel

Mike Butcher, Jürgen Müller, Katrin Lehmann, Tobias Regenfuss

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation thumbnail
21:17
almost 2 years ago

Carl Lapierre - Exploring Advanced Patterns in Retrieval-Augmented Generation

Carl Lapierre

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI! thumbnail
31:50
about 2 years ago

Coding an Immersive Copilot using Unity / .NET and Azure OpenAI!

Zaid Zaim

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging thumbnail
29:43
about 2 years ago

Building a diverse tech company: The power of Diversity, Equity, Inclusion, and Belonging

Sue Quackenbush

Dapr in Practice thumbnail
24:08
about 2 years ago

Dapr in Practice

marcklefter

Minimising the Carbon Footprint of Workloads thumbnail
27:46
about 2 years ago

Minimising the Carbon Footprint of Workloads

Michael Mueller

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 23, 2026 · 10:45–12:45

Stage 8

SBX 101: Hands-on with Docker Sandboxes

Dan Ndombe

Developer Success, Docker

Dan Ndombe
Open session

World Congress 2026 North America

September 24, 2026 · 14:10–14:40

Stage 2

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois
Open session

World Congress 2026 North America

September 25, 2026 · 15:30–16:00

Mainstage

One Boundary for the Agentic Era

Mark Lechner

Chief Information Security Officer of Docker

Mark Lechner
Open session

World Congress 2026 North America

September 25, 2026 · 16:50–17:20

Stage 1

Honey, look! I vibe-coded an OS!

Ian Smith

CTO of LYOS

Ian Smith
Open session

World Congress 2026 North America

September 25, 2026 · 13:30–14:00

Stage 9

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

September 23, 2026 · 15:45–17:45

Stage 8

Docker's Agentic Platform: Sandboxes, MCP, and the Infrastructure of Autonomous Development

Oleg Šelajev

AI and Developer relations at Docker

Oleg Šelajev

Related videos

Gentle Introduction to eBPF thumbnail
9:03
World Congress 2023 • almost 3 years ago

Gentle Introduction to eBPF

Ayesha Kaleem

An Applied Introduction to eBPF with Go thumbnail
26:48
World Congress 2024 • about 2 years ago

An Applied Introduction to eBPF with Go

Ozan Sazak

A Hitchhikers Guide to Container Security - Automotive Edition 2024 thumbnail
21:49
World Congress 2024 • about 2 years ago

A Hitchhikers Guide to Container Security - Automotive Edition 2024

Reinhard

Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves thumbnail
31:32
World Congress 2026 Europe • 2 months ago

Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves

Jan Mensch

Kubernetes dev is fun, but setup and ops isn't! See a fun PaaS alternative to push any code, ipynbs or even just data! thumbnail
56:15
LIVE • almost 3 years ago

Kubernetes dev is fun, but setup and ops isn't! See a fun PaaS alternative to push any code, ipynbs or even just data!

Maurice Brinkmann

Enhancing Workload Security in Kubernetes thumbnail
44:00
LIVE • over 4 years ago

Enhancing Workload Security in Kubernetes

Dimitrij Klesev, Andreas Zeissner

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.