Tutorial: Create Your First EBPF Program to Monitor Your System Using Bumblebee
summary
Shows how to go from BCC to libbpf to a tool called Bumblebee that compiles only the kernel eBPF C, packages the artifact as an OCI image, and eliminates writing the user-space reader. Demonstrates building (B build), pushing (B push) and running (B run) the probe, exposing /metrics for Prometheus, deploying it as a DaemonSet, and visualizing service-to-service TCP flows for a Bookinfo demo. The pipeline works end-to-end and produces Prometheus counters and a topology graph.
AI-written summary · about
chapters (12)
- 0:00Start
- 0:22Intro
- 4:27Advantages of Ebpf
- 6:57Write an Ebpf Program
- 7:10Bpf Compile Collection
- 10:29Why Bumblebee
- 16:21Introduction to Ebpf
- 24:16Source Code
- 27:37User Space Application
- 30:47Install Bumblebee
- 36:42Why Bumblebee Is Important
- 45:55Deploy Bumblebee
related talks
36mBumbleBee: Or How I Learned To Stop Worrying And Love eBPF
25mPowering Observability with Simple, Sharable, EBPF Programs
35mBumbleBee: Or How I Learned To Stop Worrying And Love eBPF - Krisztian Fekete
18mFind out what your processes are capable of with ebpf
29mKubernetes Observability with eBPF
27mStep By Step Kubernetes Observability with eBPF
38mMy First Monitoring with eBPF
01h 18mTutorial: Getting Started with eBPF