The art of writing eBPF programs (opens in new tab)

I logged in just to say this: I love the sysdig engineering blog. Please don't stop writing blogposts. sysdig and clouflare are becoming my favorite engineering blogs.

There's also this 2017 LWN article on eBPF [1] which I find very interesting.

[1] - https://lwn.net/Articles/740157/

Took me a while to find that eBPF was extended/enhanced Berkeley Packet Filter. Wikipedia was no help.

This is very interesting. I dabbled with eBPF before using the more traditional bcc tools and the canned scripts, but this deep dive really gives a good perspective on the implementation underneath.

I wonder how long before we will see more critical parts of the kernel machinery being implemented completely in eBPF (like XDP currently). Fascinating technology!