eBPF on the Rise - Getting Started

Explore the rising importance of eBPF in cloud-native environments through this comprehensive conference talk. Dive into the core architecture of eBPF programs, learning how they attach and run safely in the kernel. Discover the components of the eBPF subsystem and gain practical knowledge on using utilities like bpftool, bcc tools, bpftrace, and libbpf to manipulate eBPF objects. Understand eBPF's benefits for observability and networking programmability in Linux and containers, with a focus on its applications in Kubernetes clusters. Learn about Cilium's optimized datapath and various eBPF use cases in the wild. Get equipped with the knowledge and tools to instrument clusters effectively, from load-balancing traffic to chasing metrics, and prepare to harness the power of eBPF in cloud-native environments.

Intro
In-Kernel, Safe and Flexible Programs
extended Berkeley Packet Filter
Communicate with Maps
A Powerful Execution Engine
Countless Use Cases
LLVM Backend to the Rescue
Example: Networking
Example: Tracing With BCC
BCC Tools: Opensnoop
BCC Tools: CPU Profiling, Flame Graphs
BCC Tools (2019)
Bpftrace for Powerful One-Liners
Build Your Own: Libraries
Bpftool: Manage eBPF Objects
Bpftool: Inspect Programs
Bpftool: Manage Maps
More Bpftool!
The Force is Strong With eBPF
Tracing Pods in a Kubernetes Cluster
Mastering Networks With Cilium
Cilium's Optimized Datapath
Cilium Use Cases for eBPF
In the Wild
A Thriving Ecosystem
On the Rise
Wrapping Up
Thank You!