Developing Modern eBPF Applications
summary
Modern eBPF supports real function calls and loops (including a kernel-side BPF Loop and bpf_for_each_map), so code no longer needs aggressive inlining; verifier limits apply per-function, letting larger programs pass. Object files link at build or load time with bpftool link, and individual functions can be swapped live via freplace (used by libxdp to attach multiple XDP programs). Test and benchmark kernel execution directly with bpf_test_run to validate packet inputs and returned results.
AI-written summary · about
chapters (7)
- 0:00Modern eBPF development
- 1:02eBPF features and improvements
- 7:18Composing eBPF programs
- 13:20Testing eBPF programs
- 19:17eBPF helpers and kernel functions
- 23:12eBPF advancements and use cases
- 24:16Q&A on unbounded loops
