Buzzing across the eBPF Landscape and into the Hive
summary
Explains how eBPF loads verified by eBPF verifier event-driven programs into the kernel, JITs them JIT to native speed, and shares state via maps; shows Cilium powering container networking and identity-based policies and notes Cilium used by major cloud providers; demos Hubble for flow logs, Pixie/pyroscope for tracing/profiling, and Tetragon for runtime enforcement with Tetragon; cites a production load‑balancer performance jump, notes eBPF is ten years old (merged 2014), requires privileged loading, and needs business‑level wiring to be useful.
AI-written summary · about
chapters (14)
- 0:00Introduction to eBPF
- 1:49Kernel space vs user space
- 3:57What eBPF enables
- 6:46How eBPF works safely
- 9:57eBPF in cloud native world
- 11:41eBPF in production today
- 13:25Observability with eBPF
- 14:48Security with eBPF
- 16:13Tracing and profiling
- 17:16eBPF limitations and reality
- 19:41eBPF landscape and growth
- 21:45Where to learn more
- 23:55Why eBPF matters
- 24:58Q&A session
related talks
47mInto the Heart of the eBPF Hive!
33mThe Future of eBPF in Cloud Native
17meBPF in Microservices Observability
36mPanel Disucssion: Is There Actually a Byte Behind All the Buzz? eBPF in Production!
40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools- 40mPanel Discussion: eBPF: A New Era in Cloud Infrastructure Tools
48mInto the hive of eBPF!
29mKubernetes Observability with eBPF