eBPF Superpowers for Go programmers
summary
Explains eBPF as programmable kernel code (attach points like execve kprobe or XDP for NIC offload), shows a C eBPF “hello” attached to execve and a practical mitigation for a “packet of death”, and notes verifier safety plus instruction limit growth from 4,000 to 1,000,000. Describes user-space workflow: compile C/Rust to BPF ELF, embed via go generate, load maps and programs from Go (requires root), and cites Cilium/Hubble, Pixie, BCC and Inspector Gadget.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:52What Is Ebpf
- 3:14Kernel
- 3:27Evpf
- 6:24List of Currently Loaded Bpf Programs
- 13:54Tail Call
- 14:55Maps
- 20:33Pixie
- 27:11Can I Write Ebpf Programs in Go
- 38:13More Information
related talks
35mAn Introduction to eBPF - Superpowers for Networking, Observability & Security
31meBPF 101
36mA Beginner's Guide to eBPF Programming with Go
32meBPF: The Next Power Tool of SREs
43meBPF Superpowers for SRE
32meBPF: BPF kernel infrastructure
24mUnlocking eBPF from Go
32mExploring the Power of eBPF for System Observability