This presentation was recorded at GOTOpia February 2021. #GOTOcon #GOTOpia
http://gotopia.eu
Liz Rice - VP of Open Source Engineering at Aqua Security @lizrice5029
ABSTRACT
eBPF has been described as “Superpowers for Linux,” and recently we’ve seen an explosion of tools that use it to power observability, security and more. It's an exciting technology that enables running bespoke programs directly in the kernel. In this talk Liz uses live-coding examples to explore how eBPF programs are loaded and run in the kernel, and how user-space code can communicate with them to extract [...]
TIMECODES
00:00 Intro
01:05 What is eBPF?
04:34 Eyplore bpf syscalls in bpftrace
04:39 demo
06:43 eBPF programs & maps
09:56 Attach custom code to an event
10:35 demo
11:39 How to write eBPF hello world?
14:50 eBPF hello world
14:58 demo
24:40 eBPF maps
25:37 demo
31:55 Recreate bpftrace command
32:05 demo
34:48 Outro
Download slides and read the full abstract here:
https://gotopia.eu/february-2021/sessions/1688/a-beginners-guide-to-ebpf
RECOMMENDED BOOKS
Liz Rice • Learning eBPF • https://amzn.to/4bIhSbH
Liz Rice • Container Security • https://amzn.to/3oU4iJe
Liz Rice • Kubernetes Security • https://www.oreilly.com/library/view/kubernetes-security/9781492039075
Calavera & Fontana • Linux Observability with BPF • https://amzn.to/3yV2yUR
Brendan Gregg • BPF Performance Tools • https://amzn.to/3B1pxiV
Brendan Gregg • Systems Performance • https://amzn.to/3ibg28i
Aaron Parecki • OAuth 2.0 Simplified • https://amzn.to/2A3IMOf
Aaron Parecki • OAuth 2.0 Servers • https://amzn.to/3ecHEsz
Aaron Parecki • The Little Book of OAuth 2.0 RFCs • https://amzn.to/3i7qnlC
Erdal Ozkaya • Cybersecurity: The Beginner's Guide • https://amzn.to/2T6OIj3
Richer & Sanso • OAuth 2 in Action • https://amzn.to/3hXiAH6
Wilson & Hingnikar • Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0 • https://amzn.to/2U8iLY2
https://twitter.com/GOTOcon
https://www.linkedin.com/company/goto-
https://www.instagram.com/goto_con
https://www.facebook.com/GOTOConferences
#eBPF #BPF #ExtendedBPF #Observability #Linux #GoLang #Kernel #BerkeleyPacketFilters #Demo #eBPFdemo #LizRice
CHANNEL MEMBERSHIP BONUS
Join this channel to get early access to videos & other perks:
https://www.youtube.com/channel/UCs_tLP3AiwYKwdUHpltJPuA/join
Looking for a unique learning experience?
Attend the next GOTO conference near you! Get your ticket at https://gotopia.tech
Sign up for updates and specials at https://gotopia.tech/newsletter
SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily.
https://www.youtube.com/user/GotoConferences/?sub_confirmation=1