Check out my first novel, midnight's simulacra!

EBPF: Difference between revisions

From dankwiki
No edit summary
No edit summary
Line 2: Line 2:


==Compiling eBPF==
==Compiling eBPF==
 
===JIT===
* JIT requires the <tt>net.core.bpf_jit_enable</tt> [[sysctl]] to be set


==See Also==
==See Also==
* [[XDP]]
* [[XDP]]

Revision as of 03:06, 23 September 2019

eBPF (Enhanced Berkeley Packet Filter) is a powerful technique capable of compiling high-level languages into a BPF bytecode, which is JITted into local machine code, and can be inserted into a running kernel. It builds atop kprobes, and is in the same family of tools as SystemTap and DTrace.

Compiling eBPF

JIT

  • JIT requires the net.core.bpf_jit_enable sysctl to be set

See Also