Buzzing Across the Cloud Native Landscape with eBPF
summary
eBPF makes the Linux kernel programmable so teams can load event-driven programs (kprobes, uprobes, syscall hooks) without rebooting, verified by the eBPF verifier and exporting state via BPF maps for userland. It drives networking (Cilium replaces kube-proxy), observability (Hubble, Pixie, pyroscope, parka) and security (Falco, Tetragon), claims include Facebook using eBPF in production since 2017 and reported cases of 72x CPU reduction after switching.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:46Kernel vs user space paradox
- 3:10eBPF and the Linux kernel
- 5:55eBPF programs and superpowers
- 6:58eBPF safety and performance
- 9:06eBPF in cloud native
- 10:31Cloud native eBPF use cases
- 15:40eBPF ecosystem growth
- 17:48eBPF kernel and industry trends
- 19:12eBPF as a tool not a magic bullet
- 20:57eBPF in applications
- 22:05Q&A
related talks
37mJust Buzz or Real Byte? eBPF in Cloud Native
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
36mCloud Native Superpowers with eBPF
36mPanel: Exploring eBPF Use Cases in Cloud-Native Security
46mThe eBPF Revolution: A Dynamic Linux Kernel
47mInto the Heart of the eBPF Hive!- 40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
24mCloud Native Superpowers with eBPF