eBPF-based Kubernetes Security
Explore cutting-edge eBPF technology for enhancing Kubernetes security, offering advanced protection and monitoring capabilities for cloud-native environments.
Enhancing Observability in Cloud-Based Educational Linux Lab Environment
Explore eBPF-based solutions for enhancing observability in cloud-based Linux lab environments, focusing on real-time resource monitoring and user behavior insights with minimal performance impact.
DTrace and eBPF: New Challenges - Pitfalls and Solutions
Explore technical challenges and creative solutions in Linux kernel tracing, focusing on DTrace and eBPF implementation pitfalls and potential improvements for enhanced system observability.
Developing Continuous eBPF Profiler - From Kernel to Cloud
Explore eBPF profiling for interpreted languages and JIT runtimes, discussing challenges in scalability, uniformity, and integration with cloud-native ecosystems. Learn about edge cases and low-level observability implementation.
Safe Sharing of the Network with eBPF
Explore eBPF-based transport tunings for improved network performance and reliability, covering intra-datacenter and inter-region solutions, custom TCP congestion control, and deployment challenges.
xprobes: Hybrid User/Kernel eBPF Probes for Cross-Layer Observability
Explore xprobes, a hybrid eBPF technology combining uprobes and kprobes for enhanced performance diagnostics. Learn how xprobes provide cross-layer visibility, enabling precise attribution of latency to specific functions and system events.
eBPF Shenanigans with Flux
Explore advanced eBPF techniques in Flux framework: data structures, memory allocation, and object-oriented programming for multicore schedulers on Google's Ghost kernel scheduling class.
Evolution of Direct Server Return Implementation for Containerized Applications
Exploring the evolution of Direct Server Return (DSR) for containerized apps, addressing challenges in multi-tenancy and network namespaces, and discussing solutions for efficient L4 load balancing.
Extending AF_XDP with Hardware Metadata
Explore AF_XDP's recent advancements in NIC offloads, its impact on low-level networking, and future developments for enhanced userspace access to networking queues.
VSOCK: From Convenience to Performant VirtIO Communication
VSOCK's evolution from convenience to high-performance protocol for VM-host communication. Explores datagram support, performance advantages over UDP, and sockmap integration for enhanced eBPF capabilities.
Extending Non-Repudiable Logs with eBPF
Explore how eBPF enhances TPM-based non-repudiable logging, enabling granular system integrity verification and container attestation for improved security and trust in Linux systems.
Towards a Standardized eBPF ISA - Conformance Testing
Explore the BPF Conformance Suite's role in ensuring cross-runtime compatibility for BPF programs. Learn about its components, applications, and impact on the BPF ecosystem's security and collaboration.
Troubles and Tidbits from Datadog's eBPF Journey
Explore Datadog's eBPF journey, uncovering challenges, pitfalls, and lessons learned in observability, security, and networking. Gain insights into eBPF hook points, security bypasses, and networking complexities.
bpftime - Fast Uprobes with User Space BPF Runtime
Explore bpftime, a userspace eBPF runtime offering faster uprobes and syscall hooks. Learn about its performance benefits, implementation techniques, and compatibility with existing eBPF toolchains.
Make ftrace_regs a Common Trace Interface for Function Entry/Exit Tracing
Exploring ftrace_regs as a unified interface for function tracing, addressing limitations of pt_regs and improving efficiency across architectures. Discusses integration with fprobe, eBPF, and function-graph tracer.
Are Our Systems Using Up-to-Date Cryptography?
Explore modern cryptography auditing techniques using USDT and eBPF to detect legacy algorithms, ensuring system security without compromising performance or privacy.
Improving Containers Isolation in Kubernetes
Explore Kubernetes Security Profiles Operator for enhanced container isolation, focusing on SELinux, seccomp, and AppArmor. Learn how eBPF simplifies custom profile creation and gain insights from Adobe's implementation.
All Your Queues Are Belong to Us - The Hunt for a Network Bug in the Kernel
Dive into a complex Kubernetes network performance issue, exploring debugging steps, kernel tracing, and the discovery of a bug. Learn about eBPF-based mitigation and upstream fixes.
Kernel Tracing Using eBPF - Mentorship Session
Explore eBPF for dynamic kernel instrumentation, gaining deep insights into kernel functionality. Learn concepts, programs, maps, and practical tracing techniques for comprehensive system monitoring.
Bringing the Power of eBPF to QEMU
Explore eBPF integration in QEMU: infrastructure design, network filtering, and future applications. Learn to compile and load eBPF programs for enhanced kernel capabilities without source modifications.
eBPF-based Extensible Paravirtualization for High Performance Applications
Explore eBPF-based extensible paravirtualization for high-performance applications, addressing semantic gaps between guest OS and host hypervisor without kernel modifications or static resource allocation.