Info

eBPF

eBPF is a revolutionary technology with origins in the Linux kernel that can run sandboxed programs in a privileged context such as the operating system kernel. It is used to safely and efficiently extend the capabilities of the kernel without requiring to change kernel source code or load kernel modules.

General

Articles

Blogs

  • Brendan Gregg - Cool guy with pleasant contents about ebpf and kernel technologies
  • Isovalent Blog - More about ebpf and kernel technologies, especially cilium and sub-projects of cilium

Repositories

  • awesome-ebpf : A curated list of awesome projects related to eBPF

Tools

  • Cilium: eBPF-based Networking, Observability, Security
  • Pyroscope: Continuous Profiling Platform. Debug performance issues down to a single line of code