Powering Observability with Simple, Sharable, eBPF Programs
Explore how eBPF programs enhance observability in cloud-native environments, offering insights into system performance and behavior without modifying application code.
Kubernetes Network Policy Enforcement in XDP without IP Translation
Explore advanced Kubernetes network policy enforcement using XDP and eBPF, focusing on IP-based and label-based approaches for efficient traffic management and security.
BPF Tales: Recompiling the Kernel to Average Numbers in Datacenters
Explore BPF for efficient data processing in datacenters, focusing on averaging numbers and optimizing storage operations through kernel-level programming.
Comparing eBPF and Istio-Envoy for Monitoring Microservice Interactions
Explore microservice monitoring: eBPF vs Istio/Envoy. Compare visibility, performance impact, and deployment strategies for improved observability in Kubernetes environments.
Getting Started with Container Runtime Security Using Falco
Learn about Falco, a CNCF project for container runtime security. Explore its architecture, rules, and real-world applications. Discover how Falco protects Kubernetes workloads and its future roadmap.
eBPF and Networking - LPC 2023
Explore cutting-edge eBPF technology and its impact on networking in this comprehensive Linux Plumbers Conference session, featuring expert discussions and live demonstrations.
eBPF and Networking - LPC 2023
Explore cutting-edge eBPF technology and its impact on networking in this comprehensive Linux Plumbers Conference session, featuring expert discussions and live demonstrations.
The Falco Playground - WebAssembly and Runtime Security
Explore Falco Playground: a WebAssembly-powered web app for writing and testing Falco rules, enabling runtime security for Linux systems and cloud logs anywhere, with enhanced portability and accessibility.
eBPF and WebAssembly for Lightweight Observability in Kubernetes
Explore how eBPF and WebAssembly combine to enhance lightweight observability in Kubernetes clusters, offering efficient network traffic management and streamlined deployment of eBPF programs.
Paint the Picture - Detecting Suspicious Data Patterns in Encrypted Traffic with eBPF and KTLS
Explore eBPF and kTLS for detecting sensitive data patterns in encrypted Kubernetes traffic, enhancing security monitoring without operational complexity or application impact.
Run Fast! Catch Performance Regressions in eBPF with Rust
Implement continuous benchmarking in eBPF programs using Rust. Learn to write benchmarks, integrate them into CI, and prevent performance regressions in both client and kernel-side code.
eBPF Superpowers for SRE - Enhancing Observability, Security, and Connectivity
Explore eBPF's potential for SREs in observability, security, and connectivity. Learn about this powerful kernel technology and discover open-source projects to enhance performance and solve infrastructure challenges.
Mastering the Container Security Model - Best Practices and Tools
Explore container security best practices, from building secure images to runtime monitoring. Learn to prevent vulnerabilities, optimize applications, and leverage tools like Docker Scout and Sysdig for enhanced cloud-native security.
Getting Started with BPF Security Observability
Explore eBPF for real-time security observability, event collection, and threat detection. Learn to attach to kernel code paths and analyze system events for enhanced cybersecurity measures.
Leveraging eBPF on OpenShift with Project Calico for Performance
Explore eBPF on OpenShift with Project Calico to enhance cloud-native performance. Learn about Calico data planes, packet flow, and security while gaining hands-on experience with eBPF implementation and testing.
Turbocharging AKS Networking with Calico eBPF
Explore advanced AKS networking with Calico eBPF, enhancing performance and security for cloud-native applications in Azure Kubernetes Service environments.
Secure the Linux Kernel with eBPF Linux Security Module
Explore eBPF Linux Security Module for implementing granular security policies in the Linux kernel without configuration or kernel modules. Learn to leverage BPF LSM hooks for MAC and DAC policies.
Advancing Kernel Control Flow Integrity with eBPF
Explore eBPF's potential in enhancing kernel security through control flow integrity. Learn about challenges, implementation techniques, and performance optimization for improved kernel protection.
Sysarmor: Meta's eBPF Security Detection and Enforcement Tool
Explore Meta's Sysarmor: an eBPF-based security daemon for threat detection and rule enforcement in high-risk environments, featuring efficient in-kernel evaluation and innovative approaches to process and container monitoring.
Overflowing the Kernel Stack with BPF - Security Implications and Mitigations
Exploring vulnerabilities in eBPF's kernel stack usage, demonstrating overflow scenarios through program attachment and nesting, and discussing mitigation strategies for runtime environment assumptions.
Verifying the Verifier - eBPF Range Analysis Verification
Automated tool Agni checks eBPF verifier's range analysis correctness, extracts semantics from kernel source, and synthesizes programs to expose potential bugs in older kernel versions.