Observability
eBPF explained: programs in the Linux kernel to observe without instrumenting
What eBPF is, how a program is verified and then run in the kernel, hook points (kprobes, uprobes, tracepoints, XDP), maps, CO-RE and what it changes for …
Guides & insights
A library for curious minds
Observability
eBPF in production: security, prerequisites and limits
What to know before deploying eBPF agents: privileges and capabilities, kernel versions, managed environments, overhead, TLS encryption and security obser…
Learning never stops