eBPF and Go

eBFP (7 years old) is a sandbox that can run code inside the linux kernel. It started as a technology to build firewalls, and has evolved over time to include a range of new features.

The panel discuss the origins of eBPF and how it works, as well as dig into some real-world use cases. While eBPF programs themselves aren’t written in Go (more like C), we will hear about how you can communicate with eBPF programs from your Go code.

Discuss on Changelog News

Join Changelog++ to support our work, get closer to the metal, and make the ads disappear!

Sponsors

• Teleport – Securely access any computing resource anywhere. Engineers and security teams can unify access to SSH servers, Kubernetes clusters, web applications, and databases across all environments. Try Teleport today in the cloud, self-hosted, or open source at goteleport.com
• Incident.io – Create, manage, and resolve incidents directly in Slack. Use the /incident command to create and manage incidents. This command lets you share updates, assign roles, set important links and more – all without ever leaving the incident channel. Each incident gets their own Slack channel plus a high-res dashboard at incident.io with the entire timeline from report to resolution. Learn more and sign up for free at incident.io — no credit card required.
• Equinix Metal – If you want the choice and control of hardware…with low overhead…and the developer experience of the cloud – you need to check out Equinix Metal. Deploy in minutes across 18 global locations, from Silicon Valley to Sydney. Visit metal.equinix.com/justaddmetal and receive $100 credit to play.

Featuring

• Grant Seltzer Richman – Twitter, GitHub, Website
• Derek Parker – Twitter, GitHub
• Mat Ryer – Twitter, GitHub, LinkedIn, Website
• Johnny Boursiquot – Twitter, GitHub, Website

Notes and Links

• Learn more about eBPF on ebpf.io
• Email thread on eBPF’s 7th Birthday
• Package libbpfgo - libbpfgo is a Go library for Linux’s eBPF project (Apache License 2.0)
• Tracee: Runtime Security and Forensics using eBPF - A project discussed in this episode (Apache License 2.0)
• Liz Rice’s talks on eBPF

Episode source