Just Buzz or Real Byte? eBPF in Cloud Native
Talkat KubeCon + CloudNativeCon + Open Source Summit China 2023 · on Thursday, 2023-09-28· at 14:45· 3层 305A会议室| 3F Room 305A·
summary
eBPF makes the Linux kernel dynamically programmable so teams can add observability, high‑performance networking and runtime security without app instrumentation; it uses a verifier to prevent unsafe code, maps for kernel↔user sharing, and executes in‑kernel for native speed. Production examples include Cilium for networking, Pixie and OpenTelemetry BPF collectors for tracing, and Parca/Pyroscope for continuous profiling — one Parca run cut Cilium memory overhead by 30% memory reduction. eBPF is on most kernels, being ported to Windows and eyed for IETF standardization.
AI-written summary · about
chapters (15)
- 0:00eBPF and Cloud Native intro
- 1:25eBPF like Intel Inside kernel
- 3:14Kernel-user space paradox solved
- 7:23eBPF programs and superpowers
- 9:58eBPF safety and performance
- 11:06eBPF in Cloud Native
- 13:29Cloud Native eBPF use cases
- 17:26eBPF ecosystem growth
- 19:54When eBPF is not the right solution
- 23:25eBPF future in Cloud Native
- 26:02Q&A: Verification and safety
- 28:33Q&A: Use cases and security
- 32:08Q&A: Troubleshooting tools
- 34:03Q&A: Kernel tuning alternatives
- 36:53Closing remarks
related talks
29mBuzzing Across the Cloud Native Landscape with eBPF
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
46mThe eBPF Revolution: A Dynamic Linux Kernel
33mThe Future of eBPF in Cloud Native
15mKeynote: eBPF: Unlocking Innovation in the Linux Kernel
35mAn Introduction to eBPF - Superpowers for Networking, Observability & Security- 40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
31meBPF 101