Get Started with eBPF
- Try the Lab
Try the Lab
Borrowing the opensnoop example from Liz Rice’s report, this lab teaches you to handle an eBPF tool, watch it loading its components, and even add your own tracing into the source eBPF code.
- Read the Books
Read the Books
Read the “What is eBPF?” and “Learning eBPF” O’Reilly Books by Liz Rice or BPF Performance Tools by Brendan Gregg to get started. Throughout the books, you will learn what eBPF and why it is so powerful, the capabilities it provides.
- Watch the video
Watch the video
Dive into the history of eBPF with this talk from John Fastabend. Starting in the “early days” of 2014, it covers the main projects, companies, and players that influenced the landscape of Linux networking at the time and how they enabled the creation of eBPF.
Read the Documentation to learn more about eBPF
Wikipedia
Wikipedia article on eBPF
eBPF Stackoverflow
Ask questions and read answers
eBPF community on Reddit
Discuss the eBPF kernel subsystem
BPF & XDP Reference Guide
Learn BPF internals and programming
BPF Documentation
BPF Documentation in the Linux Kernel
BPF Design Q&A
FAQ for kernel-related eBPF questions
Subscribe to bi-weekly eCHO News
Keep up on the latest news and information from the eBPF and Cilium
Explore books on eBPF from the industry experts
- What is eBPF? Liz Rice, O’Reilly, 2022
![What is eBPF? Liz Rice, O'Reilly, 2022]()
- Systems Performance: Enterprise and the Cloud, 2nd Edition, Brendan Gregg, Addison-Wesley Professional Computing Series, 2020
![Systems Performance: Enterprise and the Cloud, 2nd Edition, Brendan Gregg, Addison-Wesley Professional Computing Series, 2020]()
- BPF Performance Tools, Brendan Gregg, Addison-Wesley Professional Computing Series, Dec 2019
![BPF Performance Tools, Brendan Gregg, Addison-Wesley Professional Computing Series, Dec 2019]()
- Linux Observability with BPF, David Calavera, Lorenzo Fontana, O’Reilly, Nov 2019
![Linux Observability with BPF, David Calavera, Lorenzo Fontana, O'Reilly, Nov 2019]()
- Learning eBPF O’Reilly book by Liz Rice
![Learning eBPF O'Reilly book by Liz Rice]()
Dig into the eBPF technology with tutorials from industry experts
More tutorialseBPF Tracing Tutorials
Learn how to use eBPF for tracing from just running bcc tools to developing with bpftrace and bcc.XDP Tutorials
Learn the basic steps needed to effectively write programs for the XDP from what it is to attaching multiple programs to one interfaceCompiler Explorer
BPF support to run the compiler interactively in your web browser and explore the assembly
Attend eBPF events to learn from industry experts
Conference
FOSDEM 2025 eBPF Devroom
After years of hosting eBPF talks in various devrooms, FOSDEM welcomes the first devroom dedicated to eBPF.
Brussels, Belgium
Conference
Cilium + eBPF Day North America 2024
Cilium + eBPF Day is a full-day co-located event for Cilium and eBPF users, contributors, and new community members. The focus of the event is on how Cilium and eBPF are being developed, deployed, and used across the cloud native landscape. Join us for another Cilium + eBPF Day in North America!
Salt Lake City, Utah
Conference
Linux Plumbers Conference 2024
For the fifth year in a row, the eBPF & Networking Track is going to bring together developers, maintainers, and other contributors from all around the globe to discuss improvements to the Linux kernel’s networking stack as well as BPF subsystem and their surrounding user space ecosystems such libraries, loaders, compiler backends, and other related system tooling.
Vienna, Austria
eBPF introductory videos
Learn more about eBPF in articles from the community
Technology27 Oct, 2024
P99Conf: How eBPF Could Make Faster Database Systems
Learn about BPF-DB, an in-memory key-value data store that can be planted within the OS kernel itself via eBPF, thereby routing around the restrictions and limitations of an OS’s user space, or the space in memory where a program is typically run
How-To26 Oct, 2024
Debugging Memory Leaks with eBPF
Learn how eBPF and uprobes can be combined to trace memory allocations and detect leaks
How-To25 Oct, 2024
How to use eBPF for monitoring Linux thread contention?
Learn to create a minimal scheduler written with sched_ext in C