Learning eBPF

Index

A

• attachment
  • of program to event, Attaching to an Event-Attaching to an Event
  • user space, User Space Attachments-User Space Attachments
• attachment types
  • BPF, BPF Attachment Types
  • eBPF programs and, eBPF Program and Attachment Types-Summary
• Aya project, Aya-Aya

B

• BCC framework
  • BPF function calls, Function Calls
  • "Hello World" application, eBPF’s “Hello World”-Summary
  • portability approach, BCC’s Approach to Portability
  • Python/Lua/C++, BCC Python/Lua/C++-BCC Python/Lua/C++
• Berkeley Packet Filter (BPF)
  • eBPF origins and, eBPF’s Roots: The Berkeley Packet Filter
  • evolution to eBPF, From BPF to eBPF
• Borkmann, Daniel, The Evolution of eBPF to Production Systems, The Future Evolution of eBPF
• BPF attachment types, BPF Attachment Types
• BPF trampoline, Fentry/Fexit
• BPF Type Format (BTF) (see BTF)
• bpf() system calls, The bpf() System Call-Summary
  • attaching to kprobe events, Attaching to Kprobe Events
  • creating maps, Creating Maps
  • libppf wrapper around, The Libbpf Library for User Space
  • loading BTF data, Loading BTF Data
  • loading programs, Loading a Program
  • modifying a map from user space, Modifying a Map from User Space-Modifying a Map from User Space
  • perf buffers, Initializing the Perf Buffer
  • perf events, Setting Up and Reading Perf Events
  • program and map references, BPF Program and Map References-BPF Links
  • reading information from a map, Reading Information from a Map-Reading Map Elements
  • ring buffers, Ring Buffers-Ring Buffers
  • testing with BPF_PROG_RUN, Testing BPF Programs
• bpftool
  • attaching program to event with, Attaching ...