Check out my first novel, midnight's simulacra!
EBPF: Difference between revisions
From dankwiki
No edit summary |
No edit summary |
||
Line 2: | Line 2: | ||
==Compiling eBPF== | ==Compiling eBPF== | ||
===JIT=== | |||
* JIT requires the <tt>net.core.bpf_jit_enable</tt> [[sysctl]] to be set | |||
==See Also== | ==See Also== | ||
* [[XDP]] | * [[XDP]] |
Revision as of 03:06, 23 September 2019
eBPF (Enhanced Berkeley Packet Filter) is a powerful technique capable of compiling high-level languages into a BPF bytecode, which is JITted into local machine code, and can be inserted into a running kernel. It builds atop kprobes, and is in the same family of tools as SystemTap and DTrace.
Compiling eBPF
JIT
- JIT requires the net.core.bpf_jit_enable sysctl to be set