L3AF: Complete Lifecycle Management of eBPF Programs
Talkat Cloud Native eBPF Day Europe 2022 · on Monday, 2022-05-16· at 14:40· Pavilion 4 | Room A | Level 2 | Central Forum·
summary
L3AF is a daemon plus control plane that manages and chains eBPF programs across thousands of hosts, using Cilium’s go-ebpf library to read maps and emit Prometheus-style metrics, with mTLS-secured APIs and an open eBPF package repo (github.com/l3af-project/l3afd). Configuration is dynamic — sequence IDs form a linked-list style chain with tail calls and maps updated without restarts. Demo shows 200 requests at 20 concurrency complete <1s before attaching a rate limiter and stretch to ~80s with dropped connections, proving the chaining and runtime reconfiguration work.
AI-written summary · about
chapters (8)
- 0:00Start
- 0:30Introducing L3AF
- 4:37L3AF Daemon
- 5:19eBPF program chaining
- 6:56BPF Config maps
- 7:42BPF metric maps
- 10:00Sample config payload
- 18:42Call to Action
related talks
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
17meBPF in Microservices Observability
46mThe eBPF Revolution: A Dynamic Linux Kernel
31mBridging Dev and Ops with eBPF: Extending Observability Upwards and Downwards
47mInto the Heart of the eBPF Hive!- 40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
38mUnderstanding and Troubleshooting the eBPF Datapath in Cilium
35mAn Introduction to eBPF - Superpowers for Networking, Observability & Security