World Congress 2023 • Oct 23, 2023

Gentle Introduction to eBPF

Ayesha Kaleem

Want to modify kernel behavior without altering source code? Discover how eBPF lets developers safely run custom bytecode for advanced observability, networking, and security.

Pause
Mute Enter Fullscreen
#1 about 2 min

Overcoming the challenges of modifying Linux kernel code

Upstreaming observability features into the Linux kernel is traditionally slow and complex.

#2 about 1 min

Introduction to eBPF as a secure virtual machine

How eBPF runs custom bytecode dynamically without altering kernel source code.

#3 about 1 min

Attaching eBPF programs to event-driven kernel hooks

Triggering observability and networking logic automatically on system calls and network events.

#4 about 3 min

Writing eBPF programs using BCC and bpftrace libraries

Utilizing high-level languages and LLVM compilers to build and load a custom trace.

#5 about 2 min

Ensuring kernel safety with the eBPF verifier

How the verifier and JIT compiler guarantee program safety and execution speed before attachment.

#6 about 1 min

Synchronizing state between kernel and user space

Using eBPF maps to pass and store execution data structures safely.

#7 about 3 min

Leveraging existing eBPF tools and enterprise projects

Adopting pre-built solutions like Cilium, Falco, and Pixie without writing custom lower-level code.

Matching moments

1:41 min

Introduction to the growing popularity of eBPF

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

1:57 min

Making the Linux kernel programmable with sandboxed execution

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

2:27 min

Overview of eBPF and Edge Delta observability pipelines

Ozan Sazak Ozan Sazak · World Congress 2024

2:08 min

Protecting hardware access controls using eBPF security hooks

Reinhard Reinhard · World Congress 2024

2:13 min

Ecosystem of tooling and future capabilities of eBPF

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024

1:33 min

Practical use cases covering networking and performance profiling

Mohammed Aboullaite Mohammed Aboullaite · World Congress 2024