Blog page
How LinkedIn Identified a Kernel Lock Contention Issue Causing Recurring System Freezes
When LinkedIn engineers encountered short-lived, recurring outages where the database powering their user feed became unavailable and then recovered without leaving helpful traces, they had to devise a novel approach to uncover the root cause using off-CPU profiling with eBPF.
Read more
How Cloudflare responded to the “Copy Fail” Linux vulnerability
Responsible disclosure works, in-kernel visibility tooling pays off in moments exactly like this one, and bpf-lsm continues to be one of the most useful primitives we have for runtime kernel mitigation.
Read more
The invisible engineering behind Lambda's network
How eBPF took Lambda from 125,000 iptables rules to 144 and scaled snapshot networks by 20x.
Read more
How GitHub uses eBPF to improve deployment safety
Learn how Github uses eBPF to detect and prevent circular dependencies in its deployment tooling.
Read more
How Nutanix AHV Uses eBPF for vNIC-IP Mapping
Nutanix AVH leverages eBPF and Ring Buffer for timely and accurate vNIC-to-IP association
Read more
Hardening eBPF for runtime security: Lessons from Datadog Workload Protection
Why Datadog chose eBPF for Workload Protection and lessons learned from implementation
Read more
Scaling real-time file monitoring with eBPF: How we filtered billions of kernel events per minute
Building file integrity monitoring on top of eBPF at Datadog
Read more
Testing eBPF Program Compatibility Across Kernels with LVH and GitHub Actions
GitHub Actions Meets Little VM Helper and eBPF
Read more
Breaking Boundaries: Implementing the Enigma Machine in eBPF
André Martins celebrates Alan Turing 113th posthumous birthday by implementing the Enigma machine in eBPF
Read more
Why Does My eBPF Program Work on One Kernel but Fail on Another?
Learn how to make eBPF programs portable across different Linux kernels using BPF CO-RE and BTF, and discover techniques for supporting systems without built-in BTF by embedding external BTF data.
Read more