is a programming language and runtime to extend operating systems

“like javascript or Lua for kernel developers” “like Handling events in the kernel”

  • Why?
    • It takes very long for a change to come in the kernel
    • gives programmability in the kernel to innovate quicker
  • how
    • eBPF language (higher languages eBPF bytecode)
    • eBPF runtime (jit)
  • properties
    • secure
    • efficiënt
    • portable
  • cases
    • katran (load balancing at meta)
    • cilium in managed Kubernetes
    • android ebpf loader traffic accounting / GPU memory accounting
  • observability
    • isovalent strategic partnership with grafana
  • tools
    • hubble-ui
    • http-observability
    • grafana tempo http tracing
    • display proces ancestry tree