eBPF and Wasm: Unifying Userspace Extensions With Bpftime
Talkat KubeCon + CloudNativeCon Europe 2025 · on Thursday, 2025-04-03· at 14:15· Level 1 | Hall Entrance S10 | Room D·
summary
Claims a userspace eBPF runtime called BPF time that uses dynamic binary instrumentation, bytecode verification and hardware isolation to extend eBPF into userspace while staying compatible with the eBPF ecosystem maintained by eunomia-bpf. Implementation supports maps, helper calls, tracing, GPU hooks and an optional userspace verifier; evaluation reports about 10× faster userspace uprobe workloads versus prior approaches, a two‑year codebase and a paper accepted to a systems venue; needs kernel 6.10+ for full functionality.
AI-written summary · about
chapters (19)
- 0:00eBPF and Wasm extensions
- 1:26Software extensions need isolation
- 3:58Extension vulnerabilities risks
- 5:45Runtime framework requirements
- 7:55Existing frameworks limitations
- 10:45Interface design for safety
- 13:15WebAssembly component model
- 15:03eBPF verification-first safety
- 17:52eBPF vs WebAssembly trade-offs
- 18:54Combining eBPF and WebAssembly
- 20:44Introducing bpftime runtime
- 21:52bpftime and eBPF ecosystem
- 23:18Use cases: observability and network
- 24:45Other bpftime use cases
- 25:29bpftime limitations and future
- 25:52Key takeaways
- 26:23Q&A: Kernel eBPF compatibility
- 27:48Q&A: Wasm performance impact
- 28:54Q&A: Kernel version compatibility
related talks
31mbpftime: Fast uprobes with user space BPF runtime
29meBPF on the Rise - Getting Started
15mExtending Applications Safely and Efficiently
33meBPF: exploring use case of BPF kernel infrastructure
42mResolving Performance and Security Issues with eBPF
36meBPF for Runtime Security
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
20mGentle Introduction to EBPF