Expanding eBPF’s Reach: From Batteries-Included Auto-Instrumentation To E2E Observability Pipelines
Talkat KubeCon + CloudNativeCon Europe 2025 · on Wednesday, 2025-04-02· at 12:00· Level 1 | Hall Entrance N10 | Room E·
summary
Argues eBPF should be batteries included but removable: Pixie and Inspektor Gadget add Kubernetes enrichment, structured APIs and domain-specific programmability so auto telemetry becomes actionable. Pixie’s collector is rebuilt as a universal agent that can power Fluentbit and Vector-style pipelines. Demo shows BPFtrace oomkill events merged with tailed syslog lines, correlated by timestamp and PID, streamed through Pixie’s aggregator and exported to observability sinks; the pipeline visualizer confirms the correlation works in-cluster. auto-instrumentation becomes filterable and extensible.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:04Observability evolution
- 2:30Manual vs auto telemetry
- 4:39High-volume data challenges
- 5:41Evaluating eBPF tools
- 6:26Effective eBPF properties
- 8:11Four eBPF projects overview
- 11:20Data enrichment in Inspector Gadget and Pixie
- 13:04Structured APIs in Hubble and Pixie
- 15:32Programmability in Pulsar and Pixie
- 19:07Pixie demo
- 23:24Auto-instrumentation to pipelines
- 24:06Key takeaways and conclusion
related talks
42mCommunity Driven Breakout Session: eBPF and Auto-Instrumentation
26mTriaging Real-time Security Threats with eBPF-powered Observability
17meBPF in Microservices Observability
31meBPF for Observability: The Good, the Bad, and the Ugly
31mBridging Dev and Ops with eBPF: Extending Observability Upwards and Downwards
30mObservability in Kubernetes: Unlocking the Power of eBPF
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
28mBpftrace Meets Pixie: Dynamic Monitoring of K8s Clusters Unleashed