#ebpf — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #ebpf, aggregated by home.social.
-
Enforcing Application-Layer Policies in eBPF
-
[Перевод] XDP: практический гайд по разбору сетевого трафика с eBPF
Когда трафик измеряется миллионами пакетов в секунду, даже небольшие накладные расходы сетевого стека начинают иметь значение. XDP позволяет подключиться к обработке значительно раньше, но работать приходится почти напрямую с данными пакета. На практическом примере разберём, как подключить XDP-программу к интерфейсу, читать сетевые заголовки и понять, для каких задач такого уровня обработки достаточно, а где стоит подняться выше по стеку. Разобрать XDP
https://habr.com/ru/companies/otus/articles/1067528/
#eBPF #сетевой_трафик #XDP #linux #обработка_пакетов #сетевые_пакеты #фильтрация_трафика #TCP_UDP #IPv4_IPv6
-
Your kernel already knows why your network is broken. eBPF tools like bpftrace and tcpdrop reveal dropped packets in seconds—no agents, no restarts. Diagnose prod issues at 3AM in minutes. #eBPF #Linux #Sysadmin
https://www.valtersit.com/guides/linux/ebpf-network-observability-zero-install-kernel-tools/
-
The schedule for the #eBPF track at Linux Plumbers 2026 is live: https://lpc.events/event/20/sessions/249/#all. Another reason to come to Prague in fall!
-
We've published the list of papers and posters accepted at the 4th #eBPF workshop, colocated with SOSP'26: https://ebpf.github.io/2026/papers.html. See you all in Prague in September!
-
We've received 37 submissions for the eBPF workshop this year, up again from the previous year! #eBPF sits at the intersection of many research areas and this is reflected in the submissions. They cover eBPF's applications across operating systems, LLM systems, security, and networking. Several papers leverage formal methods to strengthen eBPF verification. This year, we've also seen multiple submissions exploring compiler optimizations, JITing, and DSLs.
We've accepted 15 submissions following the peer-review process. I can't wait to see everyone discuss their work in Prague!
-
How Do I Profile eBPF Code?
https://naveensrinivasan.com/posts/2026-07-22-how-do-i-profile-ebpf-code/
-
😴 Oh, the riveting world of #eBPF profiling! Apparently, the only way to measure #file open #performance is with a "simple" #C test harness—because why do anything the easy way when you can spend years in #dependency hell? 🛠️🔍
https://naveensrinivasan.com/posts/2026-07-22-how-do-i-profile-ebpf-code/ #profiling #programming #hell #developer #tools #HackerNews #ngated -
Nice bit of work from Datadog, looking at how the eBPF threat model has been turned on its head by malware abusing it:
https://securitylabs.datadoghq.com/articles/detection-primitives-for-ebpf-rootkits/
-
Want to get started with #OpenTelemetry but the thought of instrumenting your application code puts you off?
With #eBPF you can get table stakes telemetry without changing your code.Check out this OpenObservability Talks piece to learn about #OTel 's OBI and how it provides open source no-code multi-language and multi-protocol instrumentation:
👉 https://medium.com/p/377cb0432bf1@macias @opentelemetry @grafana
#CNCF #cloudNative #Observability #opensource #autoinstrumentation -
KP Singh, an engineer at Google, landed signed eBPF in Linux 6.18 last November. eBPF is code that runs inside the kernel. His design trusts one loader and whatever it produces. Microsoft's Hornet checked every program instead. Torvalds refused it six months later. Daniel Borkmann has since posted a third implementation. The kernel merges implementations, not causes.
-
Linux checks a signature on every driver it loads. eBPF programs run inside that same kernel and never got that check. The kernel proves the code cannot crash the machine. It never asks who wrote it. Cloudflare, Meta and 800,000 Azure network cards run on it. I have built systems on Linux since 2004, and what runs on the target is never quite what you signed.
-
Apparently, you can now also write BPF programs in Ruby: https://github.com/yuskesh/spinel-ebpf. As with the similar Java project, it's actually transpiled to C before being compiled to #eBPF bytecode. People go to great length to keep writing in their favorite language 😅
-
…a ping to the management ip got a dest unreachable. 🤯
*WTF*
Need to crash it just another time to have a serial console logging ready: https://tpaste.us/VnYv
It initial happened on 6.18.33 with 1Gbps/140k pps forwarding traffic, but also on 6.18.35 with some lower throughput. 😭
The XDP program can be found at https://codeberg.org/routerkit/fragg-off - it might crash your machine 🤷
What a day!
(2/2)
-
Real-time DoH decryption via eBPF: hook kernel skb to extract SNI and cipher metadata, correlate with user-space memory for session keys. Works on kernel 5.15+ (Ubuntu 22.04, Debian 12, CentOS 9). #network #snippet #ebpf #dns #ValtersIT
https://www.valtersit.com/vault/realtime-dns-over-https-traffic-decryption-via-ebpf-094f9e/
-
Just tried cilium cni for my kubernetes cluster setup :gura_vibe_wiggle_fast:
Cilium can use eBPF instead of iptables to boost network performance :aye:
#cilium #ebpf #kubernetes #homelabing -
AngaraBase: новая HTAP СУБД
AngaraBase — OLTP/HTAP СУБД, написанная с нуля на Rust. Совместима с PostgreSQL по протоколу — работает с psql, JDBC, psycopg2 и стандартными драйверами. UNDO-log MVCC без VACUUM, векторизованный исполнитель с SIMD-батчами — транзакции и аналитика под одним SQL и одним снапшотом, без ETL и второго хранилища. Fail-closed контракты ресурсов, USDT-пробы без рестарта, EXPLAIN с разбивкой по фазам исполнения. Dev preview доступен на angarabase.dev.
https://habr.com/ru/articles/1053076/
#HTAP #СУБД #AngaraBase #Rust #MVCC #бэкап #USDT #eBPF #PostgreSQL #векторизация
