Troubles and Tidbits from Datadog's eBPF Journey

Troubles and Tidbits from Datadog's eBPF Journey

Explore Datadog's extensive experience with eBPF in production for observability, security, and networking in this 34-minute conference talk from the Linux Plumbers Conference. Delve into the details of gotchas, pitfalls, and bugs encountered over the years, including eBPF hook points coverage issues, common bypasses for eBPF-based security tools, and real-world challenges from Datadog's cloud workload security product. Gain insights into networking challenges with eBPF, such as using LRU maps at scale, problems with shared skb mark values, and interactions between sk_reuseport and bpf_sk_assign. Learn valuable lessons from Datadog's journey to leverage eBPF for building innovative features while navigating complex technical hurdles.