Seitan: A Plant-Based Recipe Against Syscall Anxiety
Explore a unified approach to privilege separation in containers and VMs using Seitan. Learn to write JSON recipes for filtered system calls and enhance security for untrusted workloads.
BPFTrace - Finally Dtrace Replacement for Linux
Explore BPFTrace, a powerful Linux instrumentation tool. Learn its capabilities, advantages over GTrace, and practical applications for system performance analysis and debugging.
The Why and How of libseccomp
Learn to create secure syscall filters using libseccomp, reducing attack surfaces for untrusted programs. Hands-on tutorial covers filter creation, logging, debugging, and advanced techniques for enhanced process isolation.
Cilium - Kernel Native Security and DDOS Mitigation for Microservices with BPF
Explore application-aware network security and DDoS mitigation for microservices using Cilium and BPF. Learn about kproxy, XDP, and efficient container protection techniques.
Combining kTLS and BPF for Introspection and Policy Enforcement
Exploring the integration of kTLS and BPF for enhanced in-kernel introspection and policy enforcement of application data before encryption, addressing challenges and discussing optimization approaches.
XDP 1.5 Years in Production - Evolution and Lessons Learned
Evolution of XDP and BPF in production: performance improvements, operational challenges, and future enhancements. Insights from Facebook's network processing implementation using XDP for over 1.5 years.
BPF User Experience Rough Edges
Explore BPF's user experience challenges and potential improvements with experts Jakub Sitnicki and Arthur Fabre, gaining insights into this powerful Linux kernel technology.
From XDP to Socket
Explore traffic architecture, reverse proxy, and scaling solutions for high-performance networking, featuring XDP, BPF, and socket optimizations.
io_uring - BPF Controlled I/O
Explore advanced I/O techniques using io_uring and BPF, enhancing system performance and control. Learn cutting-edge approaches for efficient data handling in Linux environments.
Ahead-of-Time Compiled Bpftrace Programs
Explore ahead-of-time compilation for bpftrace programs, enhancing performance and efficiency in Linux system tracing and debugging.
Socket Migration for SO_REUSEPORT
Explore socket migration techniques for SO_REUSEPORT, including traditional approaches, workarounds, and implementation details. Learn about connection types and the reasons behind default settings.
The Journey of BPF from Restricted C Language Towards Extended and Safe C
Explore BPF's evolution from restricted to extended and safe C, enhancing Linux kernel programmability and performance optimization capabilities.
Using BPF in Cloud Native Environments
Explore BPF tools for debugging Kubernetes: Inspektor Gadget and kubectl-trace. Learn to inspect low-level details, trace system calls, and analyze network packets in cloud-native environments.
eBPF on the Rise - Getting Started
Explore eBPF's potential for Linux and container observability and networking. Learn core architecture, tools, and cloud-native benefits to enhance your cluster instrumentation skills.
Generating BPF Infrared Decoders Using Finite Automations
Generate BPF infrared decoders efficiently using finite automations. Explore advanced techniques for optimizing decoder performance in Linux systems.
Linux Kernel and BPF-Based Networking Debugger: pwru
Explore a powerful Linux kernel and BPF-based networking debugger for efficient troubleshooting and performance analysis in complex network environments.
Improving bpftrace Reliability
Enhance bpftrace reliability through advanced techniques and best practices for robust system tracing and performance analysis.
User-Space Only Uprobes - Could a BPF-Based vDSO Help?
Explore user-space uprobes and potential BPF-based vDSO solutions for enhanced performance and functionality in Linux systems.
bpftrace: What It Is, What's New, and Where It's Going
Explore bpftrace, a high-level Linux tracing language. Learn about its features, recent updates, and future developments for debugging and observability in Linux systems.
Live Control of CPU Features via Hybrid vCPU Model
Explore hybrid vCPU models for live CPU feature control in VMs, enabling seamless migration and feature utilization across diverse host environments without rebooting.
Offloading Network Traffic Classification to Hardware
Explore hardware offloading for network traffic classification, including use cases, implementation, and future developments in Linux networking.