My First Monitoring with eBPF
summary
A step-by-step guide to build a runnable eBPF monitoring pipeline using bpftrace and bpf tools: setting up the environment, compiling a C eBPF program, passing verifier checks, and deploying it. Demonstrates attaching eBPF to tracepoints and XDP, including an XDP firewall on a network interface that drops packets, and a containerized example built with manual namespaces (public repo provided). Notes warnings about running on production kernels, verifier limitations, and measurable performance tradeoffs at very high throughput.
AI-written summary · about
chapters (6)
- 0:00eBPF introduction
- 10:21Live demo with bpfTrace
- 17:55Networking with XDP
- 22:59eBPF in containers
- 26:18Advanced eBPF performance
- 28:49Conclusion
related talks
01h 02mTutorial: Create Your First EBPF Program to Monitor Your System Using Bumblebee
31meBPF 101
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
32meBPF: The Next Power Tool of SREs
32mExploring the Power of eBPF for System Observability
36mFrom Monitoring to Observability: eBPF Chaos - Michael Friedrich
35mAn Introduction to eBPF - Superpowers for Networking, Observability & Security
38mLinux Kernel Tracing Using eBPF