Mastering eBPF for Kernel-Level Tracing: Techniques and Real-World Patterns
Learn how to harness eBPF programs to safely instrument the kernel, collect metrics, and build low‑overhead tracing pipelines.
Ebpf
Inside eBPF: Tracing Kernel Events with Minimal Overhead
eBPF programs run directly in the kernel, letting you attach tracing probes to hundreds of events without modifying kernel source or paying the cost of traditional tracing tools.
Deep Dive into eBPF Program Verification in the Linux Kernel
An in-depth look at the eBPF program verifier — the component that makes it safe to run untrusted bytecode inside the Linux kernel, covering its architecture, type system, and real-world implications.
Deep Dive into Kubernetes eBPF Network Policy Enforcement with Cilium
An in‑depth look at how Cilium uses eBPF to enforce network policies in Kubernetes, covering architecture, policy types, observability, and production patterns.
Implementing eBPF Runtime Monitoring for Resource-Constrained Edge Linux Gateways
A practical guide to building a low-overhead eBPF runtime monitoring stack for edge Linux gateways, covering architecture, implementation with libbpf and BCC, and optimization strategies for constrained environments.