Building Low-Latency Secure Embedded System Using eBPF
summary
Tock runs on ARM Cortex-M and RISC-V with per-process MPU sandboxes but a nonpreemptive kernel, so interrupt handling shows high latency; solution embeds an eBPF VM as a capsule that accepts eBPF blobs from user space and runs them as fast interrupt handlers without recompiling the kernel. Implemented by adapting rbpf (removed std deps, unsafe blocks, and JITs), compiling eBPF with LLVM, and enforcing termination with a cycle-counting VM so handlers run safely with bounded execution.
AI-written summary · about
chapters (5)
related talks
42mResolving Performance and Security Issues with eBPF
33mKernel Runtime Security Instrumentation
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
32meBPF: The Next Power Tool of SREs
37mJust Buzz or Real Byte? eBPF in Cloud Native
36mPanel: Exploring eBPF Use Cases in Cloud-Native Security
29meBPF on the Rise - Getting Started
14mWill eBPF Save Us From the Next Global Outage?