World Congress 2023 • Oct 23, 2023

Gentle Introduction to eBPF

Ayesha Kaleem

Want to modify kernel behavior without altering source code? Discover how eBPF lets developers safely run custom bytecode for advanced observability, networking, and security.

Pause
Mute Enter Fullscreen
#1 about 2 min

Overcoming the challenges of modifying Linux kernel code

Upstreaming observability features into the Linux kernel is traditionally slow and complex.

#2 about 1 min

Introduction to eBPF as a secure virtual machine

How eBPF runs custom bytecode dynamically without altering kernel source code.

#3 about 1 min

Attaching eBPF programs to event-driven kernel hooks

Triggering observability and networking logic automatically on system calls and network events.

#4 about 3 min

Writing eBPF programs using BCC and bpftrace libraries

Utilizing high-level languages and LLVM compilers to build and load a custom trace.

#5 about 2 min

Ensuring kernel safety with the eBPF verifier

How the verifier and JIT compiler guarantee program safety and execution speed before attachment.

#6 about 1 min

Synchronizing state between kernel and user space

Using eBPF maps to pass and store execution data structures safely.

#7 about 3 min

Leveraging existing eBPF tools and enterprise projects

Adopting pre-built solutions like Cilium, Falco, and Pixie without writing custom lower-level code.

Matching moments

1:41 min

Introduction to the growing popularity of eBPF

Mohammed Aboullaite Mohammed Aboullaite · WWC 2024

1:57 min

Making the Linux kernel programmable with sandboxed execution

Mohammed Aboullaite Mohammed Aboullaite · WWC 2024

2:27 min

Overview of eBPF and Edge Delta observability pipelines

Ozan Sazak Ozan Sazak · WWC 2024

2:08 min

Protecting hardware access controls using eBPF security hooks

Reinhard Reinhard · WWC 2024

2:13 min

Ecosystem of tooling and future capabilities of eBPF

Mohammed Aboullaite Mohammed Aboullaite · WWC 2024

1:33 min

Practical use cases covering networking and performance profiling

Mohammed Aboullaite Mohammed Aboullaite · WWC 2024

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Trust, But Verify: Continuous GPU Validation at Scale

Kyle Bell

VP of AI @ TensorWave

Kyle Bell
Open session

World Congress 2026 North America

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois
Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

rm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)

Rishab Kumar

Staff Developer Evangelist @ Twilio

Rishab Kumar
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Bluesky's Open Source Moderation Tools: LLM-based Event Detection in Python

Alex Garnett

Developer Relations, Bluesky

Alex Garnett