Collection of eBPF resources

ebpf.md

• High-performance Linux monitoring with eBPF
• Netdev 1.2 - eBPF Offload to Hardware: cls_bpf and XDP - Nick Viljoen, Jakub Kicinski
• Alex Gartrell Executing python functions in the linux kernel by transpiling to bpf PyCon 2017
• Transparent eBPF Offload: Playing Nice with the Linux Kernel
• Golang bcc/BPF Function Tracing
• Go bindings for creating BPF programs
• eBPF program using kprobes to trace TCP events without run-time compilation dependencies
• BPF: Tracing and More
• Give me 15 minutes and I'll change your view of Linux tracing
• Infrastructure 2017 - Alfonso Acosta - High-performance Linux monitoring with eBPF
  • Slides
• Cilium - BPF & XDP for containers
• BPF kernel doc
• kprobes kernel doc
• Dive into BPF - Resource collection
• BPF docs - Another collection of docs and papers
• Tracing your TCP IPv4 connections with eBPF and BCC from the Linux kernel JIT-VM to Splunk

Install BCC on Unbuntu

sudo apt-get install apt-transport-https && \
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys D4284CDD && \
echo "deb https://repo.iovisor.org/apt trusty main" | sudo tee /etc/apt/sources.list.d/iovisor.list && \
sudo apt-get update && \
sudo apt-get install -y binutils bcc bcc-tools libbcc-examples python-bcc

Tools installed at /usr/share/bcc/tools