2021

Remove BPF
article thumbnail

Tips and Tricks for Writing Linux BPF Applications With libbpf

DZone

I had read an article on BPF portability and another on BCC to libbpf conversion , and I used what I learned to convert my previously submitted bcc-tools to libbpf-tools. See Why We Switched from bcc-tools to libbpf-tools for BPF Performance Analysis.). I ended up converting nearly 20 tools. It was fun and I learned a lot.

Database 179
article thumbnail

USENIX LISA2021 BPF Internals (eBPF)

Brendan Gregg

For USENIX LISA2021 I gave a 40 minute deep dive talk on BPF internals for Linux, focusing on observability tracing tools. Since there are already BPF internals references online (listed in this post) I used the opportunity to create some new content, showing how bpftrace instrumentation works from user space down to machine code.

Website 145
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

USENIX LISA2021 BPF Internals (eBPF)

Brendan Gregg

For USENIX LISA2021 I gave a 40 minute deep dive talk on BPF internals for Linux, focusing on observability tracing tools. Since there are already BPF internals references online (listed in this post) I used the opportunity to create some new content, showing how bpftrace instrumentation works from user space down to machine code.

Website 52
article thumbnail

How Netflix uses eBPF flow logs at scale for network insight

The Netflix TechBlog

What is BPF? Berkeley Packet Filter (BPF) is an in-kernel execution engine that processes a virtual instruction set, and has been extended as eBPF for providing a safe way to extend kernel functionality.

Network 325
article thumbnail

How To Add eBPF Observability To Your Product

Brendan Gregg

There's an arms race to add eBPF (BPF) to commercial observability products, and in this post I'll describe how to quickly do that. People like to show me their BPF observability products after they have prototyped or built them, but I often wish I had given them advice before they started. You might not even like BPF.

Latency 145
article thumbnail

USENIX LISA2021 Computing Performance: On the Horizon

Brendan Gregg

It's an exciting time for developments in computer performance, not just for the BPF technology (which I often [write about]) but also for processors with 3D stacking and cloud vendor CPUs (e.g., In case you are interested, at the same conference I also gave a talk on [BPF Internals].

article thumbnail

An Unbelievable Demo

Brendan Gregg

Later on I wrote much better socket tools (in my [DTrace] and [BPF] books). I'm reminded of this first case since my BPF tools are now appearing in observability products, and will grow to a scale much bigger than my DTrace tools. . ## Other Cases Of all the tools I had published as open source, I still can't believe socketsnoop.d