Please log in to watch this conference skillscast.
Extended BPF (eBPF) is a new type of software, and the first widely adopted change to the kernel model in 50 years. It is powering new types of flame graphs, performance tools, security tools, application accelerators, container networking, and more. eBPF is like JavaScript for the kernel, and like how JavaScript has transformed the web and enabled new types of applications, eBPF has begun transforming how we use operating systems. It is already in use by major companies on their back-end Linux servers including Netflix (14 BPF programs running by default) and Facebook (over 40). Microsoft are working on adding it to Windows, while others are working on its use in embedded environments. eBPF is composed of an in-kernel runtime for executing a virtual BPF instruction set through a safety verifier and with JIT compilation, similar to how JavaScript executes in a sandbox environment in your browser. This talk explores the past, present, and future of eBPF, and introduces open source eBPF tools that you can use today to analyze your applications and systems and solve performance issues no other tool can, including new types of flame graphs.
YOU MAY ALSO LIKE:
[Keynote] Extended BPF: Fueling new Flame Graphs and more
Brendan Gregg
Fellow Intel Corporation