World Congress 2023 Oct 23, 2023

Gentle Introduction to eBPF

Ayesha Kaleem

Want to modify kernel behavior without altering source code? Discover how eBPF lets developers safely run custom bytecode for advanced observability, networking, and security.

Pause
Mute Enter Fullscreen
#1 about 2 min

Overcoming the challenges of modifying Linux kernel code

Upstreaming observability features into the Linux kernel is traditionally slow and complex.

#2 about 1 min

Introduction to eBPF as a secure virtual machine

How eBPF runs custom bytecode dynamically without altering kernel source code.

#3 about 1 min

Attaching eBPF programs to event-driven kernel hooks

Triggering observability and networking logic automatically on system calls and network events.

#4 about 3 min

Writing eBPF programs using BCC and bpftrace libraries

Utilizing high-level languages and LLVM compilers to build and load a custom trace.

#5 about 2 min

Ensuring kernel safety with the eBPF verifier

How the verifier and JIT compiler guarantee program safety and execution speed before attachment.

#6 about 1 min

Synchronizing state between kernel and user space

Using eBPF maps to pass and store execution data structures safely.

#7 about 3 min

Leveraging existing eBPF tools and enterprise projects

Adopting pre-built solutions like Cilium, Falco, and Pixie without writing custom lower-level code.

Matching moments

1:41 min

Introduction to the growing popularity of eBPF

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

1:57 min

Making the Linux kernel programmable with sandboxed execution

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

2:27 min

Overview of eBPF and Edge Delta observability pipelines

Ozan Sazak Ozan Sazak · World Congress 2024

2:08 min

Protecting hardware access controls using eBPF security hooks

Reinhard Reinhard · World Congress 2024

2:13 min

Ecosystem of tooling and future capabilities of eBPF

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

1:33 min

Practical use cases covering networking and performance profiling

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 25, 2026 · 15:30–16:00

Stage 7

Trust, But Verify: Continuous GPU Validation at Scale

Kyle Bell

VP of AI @ TensorWave

Kyle Bell
Open session

World Congress 2026 North America

September 25, 2026 · 15:30–16:00

Mainstage

One Boundary for the Agentic Era

Mark Lechner

Chief Information Security Officer, Dokcer

Mark Lechner
Open session

World Congress 2026 North America

September 23, 2026 · 10:45–12:45

Stage 8

SBX 101: Hands-on with Docker Sandboxes

Dan Ndombe

Developer Success, Docker

Dan Ndombe
Open session

World Congress 2026 North America

September 24, 2026 · 14:10–14:40

Stage 2

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois
Open session

World Congress 2026 North America

September 24, 2026 · 11:40–12:10

Stage 2

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

September 25, 2026 · 10:20–10:50

Stage 4

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar