eBPF (7 years old) is a sandbox that can run code inside the linux kernel. It started as a technology to build firewalls, and has evolved over time to include a range of new features.

The panel discuss the origins of eBPF and how it works, as well as dig into some real-world use cases. While eBPF programs themselves aren’t written in Go (more like C), we will hear about how you can communicate with eBPF programs from your Go code.

Join the discussion

Changelog++ members save 4 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

Teleport – Securely access any computing resource anywhere. Engineers and security teams can unify access to SSH servers, Kubernetes clusters, web applications, and databases across all environments. Try Teleport today in the cloud, self-hosted, or open source at goteleport.com
Incident.io – Create, manage, and resolve incidents directly in Slack. Use the /incident command to create and manage incidents. This command lets you share updates, assign roles, set important links and more – all without ever leaving the incident channel. Each incident gets their own Slack channel plus a high-res dashboard at incident.io with the entire timeline from report to resolution. Learn more and sign up for free at incident.io — no credit card required.
Equinix Metal – If you want the choice and control of hardware…with low overhead…and the developer experience of the cloud – you need to check out Equinix Metal. Deploy in minutes across 18 global locations, from Silicon Valley to Sydney. Visit metal.equinix.com/justaddmetal and receive $100 credit to play.

Featuring:

Grant Seltzer Richman – Website, GitHub, X
Derek Parker – GitHub, X
Mat Ryer – GitHub, LinkedIn, Bluesky, X
Johnny Boursiquot – Website, GitHub, X

Show Notes:

Learn more about eBPF on ebpf.io
Email thread on eBPF’s 7th Birthday
Package libbpfgo - libbpfgo is a Go library for Linux’s eBPF project (Apache License 2.0)
Tracee: Runtime Security and Forensics using eBPF - A project discussed in this episode (Apache License 2.0)
Liz Rice’s talks on eBPF

Something missing or broken? PRs welcome!

94. How does Meduza’s Kevin Rothrock publish some of the best reporting about Russia? From far, far away.