Get Started with eBPF
- Try the Lab
Try the Lab
Borrowing the opensnoop example from Liz Rice’s report, this lab teaches you to handle an eBPF tool, watch it loading its components, and even add your own tracing into the source eBPF code.
- Read the Books
Read the Books
Read the “What is eBPF?” and “Learning eBPF” O’Reilly Books by Liz Rice or BPF Performance Tools by Brendan Gregg to get started. Throughout the books, you will learn what eBPF and why it is so powerful, the capabilities it provides.
- Watch the video
Watch the video
Dive into the history of eBPF with this talk from John Fastabend. Starting in the “early days” of 2014, it covers the main projects, companies, and players that influenced the landscape of Linux networking at the time and how they enabled the creation of eBPF.
Read the Documentation to learn more about eBPF
WikipediaWikipedia article on eBPF
eBPF StackoverflowAsk questions and read answers
eBPF community on RedditDiscuss the eBPF kernel subsystem
BPF & XDP Reference GuideLearn BPF internals and programming
BPF DocumentationBPF Documentation in the Linux Kernel
BPF Design Q&AFAQ for kernel-related eBPF questions
Subscribe to bi-weekly eCHO News
Keep up on the latest news and information from the eBPF and Cilium
Explore books on eBPF from the industry experts
- What is eBPF? Liz Rice, O’Reilly, 2022
- Systems Performance: Enterprise and the Cloud, 2nd Edition, Brendan Gregg, Addison-Wesley Professional Computing Series, 2020
- BPF Performance Tools, Brendan Gregg, Addison-Wesley Professional Computing Series, Dec 2019
- Linux Observability with BPF, David Calavera, Lorenzo Fontana, O’Reilly, Nov 2019
- Learning eBPF O’Reilly book by Liz Rice
Dig into the eBPF technology with tutorials from industry expertsMore tutorials
eBPF Tracing TutorialsLearn how to use eBPF for tracing from just running bcc tools to developing with bpftrace and bcc.
XDP TutorialsLearn the basic steps needed to effectively write programs for the XDP from what it is to attaching multiple programs to one interface
Compiler ExplorerBPF support to run the compiler interactively in your web browser and explore the assembly