eBPF on the Rise - Getting Started

This introduction explains eBPF architecture, safe kernel execution, and tools such as bpftool, BCC, and bpftrace for inspecting and tracing programs. It also shows how eBPF supports observability and networking in cloud-native environments.

Syllabus

Intro
In-Kernel, Safe and Flexible Programs
extended Berkeley Packet Filter
Communicate with Maps
A Powerful Execution Engine
Countless Use Cases
LLVM Backend to the Rescue
Example: Networking
Example: Tracing With BCC
BCC Tools: Opensnoop
BCC Tools: CPU Profiling, Flame Graphs
BCC Tools (2019)
Bpftrace for Powerful One-Liners
Build Your Own: Libraries
Bpftool: Manage eBPF Objects
Bpftool: Inspect Programs
Bpftool: Manage Maps
More Bpftool!
The Force is Strong With eBPF
Tracing Pods in a Kubernetes Cluster
Mastering Networks With Cilium
Cilium's Optimized Datapath
Cilium Use Cases for eBPF
In the Wild
A Thriving Ecosystem
On the Rise
Wrapping Up
Thank You!