Chapter 1. Introduction
In the last couple of years, eBPF has gone from relative obscurity to one of the hottest technology areas in modern infrastructure computing. Personally, I’ve been excited about the possibilities that eBPF enables ever since seeing Thomas Graf speak about it in a Black Belt session at DockerCon 17.1 At the Cloud Native Computing Foundation (CNCF), my colleagues on the Technical Oversight Committee put eBPF forward as one of the areas to watch in our predictions of the technologies that would take off in 2021. Over 2,500 signed up for that year’s eBPF Summit virtual conference, and several of the world’s most advanced software engineering companies came together to create the eBPF Foundation. Clearly, there is a lot of interest in this technology.
In this short report, I hope to give you some insight into why people are so excited about eBPF and the capabilities it offers for tooling in modern compute environments. You’ll get a mental model for what eBPF is and why it’s so powerful. There are some code examples to help make it more concrete (but you can skip over these if you prefer). You’ll get an understanding of what’s involved when building eBPF-enabled tools, and why eBPF has become so seemingly ubiquitous in such a short period of time.
Inevitably, in this short report there isn’t room to go into all the details, but I’ll leave you with some pointers for more information if you want to dive in more deeply.
Extended Berkeley Packet Filter
Let’s get ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access