Ayesha Kaleem

Gentle Introduction to eBPF

What if you could safely program the Linux kernel without changing its code? Discover how eBPF makes it possible for observability, security, and networking.

Gentle Introduction to eBPF
#1about 1 minute

The challenge of extending the Linux kernel

Adding new features to the Linux kernel is a slow and complex process, creating a bottleneck for developers who need new observability or security capabilities.

#2about 1 minute

Introducing eBPF as a kernel programmability solution

eBPF allows running custom programs in a sandboxed virtual machine inside the kernel, enabling new features without changing kernel source code.

#3about 1 minute

How eBPF programs are event-driven and written

eBPF programs are triggered by kernel events called hooks, and they are typically written in C or Python using libraries like BCC and compiled with LLVM.

#4about 1 minute

A practical "Hello World" eBPF code example

A simple program demonstrates how to write an eBPF function in C and use a Python script to load it and attach it to the execve system call.

#5about 1 minute

The eBPF runtime, verifier, and JIT compiler

Before execution, eBPF bytecode is validated by a verifier for safety and then compiled by a Just-In-Time (JIT) compiler into native machine code for performance.

#6about 1 minute

Using eBPF maps to share data efficiently

eBPF maps are key-value data structures that enable efficient data sharing between eBPF programs in the kernel and applications in user space.

#7about 2 minutes

Popular projects and companies using eBPF

Major open-source projects like Cilium, Falco, and Pixie leverage eBPF for networking and observability, and it is widely adopted by large tech companies.

Related jobs
Jobs that call for the skills explored in this talk.

Matching moments

Using content channels to build an event community
04:49 MIN

Using content channels to build an event community

Cat Herding with Lions and Tigers - Christian Heilmann

Selecting strategic partners and essential event tools
03:17 MIN

Selecting strategic partners and essential event tools

Cat Herding with Lions and Tigers - Christian Heilmann

Increasing the value of talk recordings post-event
04:57 MIN

Increasing the value of talk recordings post-event

Cat Herding with Lions and Tigers - Christian Heilmann

Organizing a developer conference for 15,000 attendees
01:32 MIN

Organizing a developer conference for 15,000 attendees

Cat Herding with Lions and Tigers - Christian Heilmann

Automating video post-production with local scripts
02:54 MIN

Automating video post-production with local scripts

Cat Herding with Lions and Tigers - Christian Heilmann

Rapid-fire thoughts on the future of work
02:44 MIN

Rapid-fire thoughts on the future of work

What 2025 Taught Us: A Year-End Special with Hung Lee

Balancing the trade-off between efficiency and resilience
03:38 MIN

Balancing the trade-off between efficiency and resilience

What 2025 Taught Us: A Year-End Special with Hung Lee

Breaking down silos between HR, tech, and business
03:39 MIN

Breaking down silos between HR, tech, and business

What 2025 Taught Us: A Year-End Special with Hung Lee

Featured Partners

Related Videos

See all videos
Into the hive of eBPF!28:20

Into the hive of eBPF!

Mohammed Aboullaite

An Applied Introduction to eBPF with Go26:48

An Applied Introduction to eBPF with Go

Ozan Sazak

A Hitchhikers Guide to Container Security - Automotive Edition 202421:49

A Hitchhikers Guide to Container Security - Automotive Edition 2024

Reinhard Kugler

Kubernetes Security - Challenge and Opportunity42:45

Kubernetes Security - Challenge and Opportunity

Marc Nimmerrichter

Kubernetes Maestro: Dive Deep into Custom Resources to Unleash Next-Level Orchestration Power!29:21

Kubernetes Maestro: Dive Deep into Custom Resources to Unleash Next-Level Orchestration Power!

Um e Habiba

Cracking the Code: Decoding Anti-Bot Systems!57:47

Cracking the Code: Decoding Anti-Bot Systems!

Fabien Vauchelles

Hacking Kubernetes: Live Demo Marathon46:36

Hacking Kubernetes: Live Demo Marathon

Andrew Martin

Why and when should we consider Stream Processing frameworks in our solutions30:51

Why and when should we consider Stream Processing frameworks in our solutions

Soroosh Khodami

Related Articles

View all articles
AG
Andre Braun, GitLab
Now is the time for industrialized software development
Now is the time for industrialized software development Recently, I received a letter from my car’s manufacturer alerting me to a recall. They had discovered a defective part and wanted to replace it. It was easily fixed, and I might have forgotten a...
Now is the time for industrialized software development

From learning to earning

Jobs that call for the skills explored in this talk.