Check out my first novel, midnight's simulacra!

EBPF: Difference between revisions

From dankwiki
No edit summary
No edit summary
Line 7: Line 7:
==See Also==
==See Also==
* [[XDP]]
* [[XDP]]
* Cilium.io's [http://docs.cilium.io/en/v1.6/bpf/ BPF and XDP Reference Guide]

Revision as of 03:28, 23 September 2019

eBPF (Enhanced Berkeley Packet Filter) is a powerful technique capable of compiling high-level languages into a BPF bytecode, which is JITted into local machine code, and can be inserted into a running kernel. It builds atop kprobes, and is in the same family of tools as SystemTap and DTrace.

Compiling eBPF

JIT

  • JIT requires the net.core.bpf_jit_enable sysctl to be set

See Also