Beyond the Buzzword: BPF’s Unexpected Role in Kubernetes
Talkat KubeCon + CloudNativeCon North America 2020 Virtual · on Thursday, 2020-11-19· at 17:40· Intrado Virtual Event Platform,·
summary
Claims that BPF delivers per-pod visibility and fast kernel-level hooks inside Kubernetes, demonstrated by deploying a daemonset that installs BPF programs and returns data via a kubectl gadget plugin. Shows specific tools used: bcc and bpftrace for tracing, Inspector Gadget with gadgets like exactsnoop and tcp tracer bpf, and a network policy advisor that records connections to JSON then outputs concrete NetworkPolicy YAML. Demos run end-to-end and generate usable policies and live syscall and exec traces.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:58What is BPF
- 1:55Why care about BPF
- 3:10History of BPF
- 6:10BPF tools
- 8:34Other BPF tools
- 11:22BPF Tool Community
- 13:24Inspector Gadget
- 16:36Demo
related talks
30mObservability in Kubernetes: Unlocking the Power of eBPF
22mRole of eBPF in Kubernetes Networking and Security
40mUsing the EBPF Superpowers To Generate Kubernetes Security Policies
28mBringing the power of eBPF tools to your k8s web UI
29mKubernetes Observability with eBPF
32mExploring the Power of eBPF for System Observability
42mMonitoring Kubernetes Traffic with eBPF
23mAn Intro to eBPF with Go : The Foundation of Modern Kubernetes Networking