A Beginner's Guide to eBPF Programming with Go • Liz Rice • GOTO 2021

35:54 5005 views 99% Published 5 months ago

This presentation was recorded at GOTOpia February 2021. #GOTOcon #GOTOpia
http://gotopia.eu

Liz Rice - VP of open source engineering at Aqua Security

ABSTRACT
eBPF has been described as “Superpowers for Linux,” and recently we’ve seen an explosion of tools that use it to power observability, security and more. It's an exciting technology that enables running bespoke programs directly in the kernel. In this talk Liz uses live-coding examples to explore how eBPF programs are loaded and run in the kernel, and how user-space code can communicate with them to extract [...]

TIMECODES
00:00 Intro
01:05 What is eBPF?
04:34 Eyplore bpf syscalls in bpftrace
04:39 demo
06:43 eBPF programs & maps
09:56 Attach custom code to an event
10:35 demo
11:39 How to write eBPF hello world?
14:50 eBPF hello world
14:58 demo
24:40 eBPF maps
25:37 demo
31:55 Recreate bpftrace command
32:05 demo
34:48 Outro

Download slides and read the full abstract here:
https://gotopia.eu/february-2021/sessions/1688/a-beginners-guide-to-ebpf

RECOMMENDED BOOKS
Liz Rice • Container Security • https://amzn.to/3oU4iJe
Liz Rice • Kubernetes Security • https://www.oreilly.com/library/view/kubernetes-security/9781492039075
Calavera & Fontana • Linux Observability with BPF • https://amzn.to/3yV2yUR
Brendan Gregg • BPF Performance Tools • https://amzn.to/3B1pxiV
Brendan Gregg • Systems Performance • https://amzn.to/3ibg28i
Aaron Parecki • OAuth 2.0 Simplified • https://amzn.to/2A3IMOf
Aaron Parecki • OAuth 2.0 Servers • https://amzn.to/3ecHEsz
Aaron Parecki • The Little Book of OAuth 2.0 RFCs • https://amzn.to/3i7qnlC
Erdal Ozkaya • Cybersecurity: The Beginner's Guide • https://amzn.to/2T6OIj3
Richer & Sanso • OAuth 2 in Action • https://amzn.to/3hXiAH6
Wilson & Hingnikar • Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0 • https://amzn.to/2U8iLY2

https://twitter.com/GOTOcon
https://www.linkedin.com/company/goto-
https://www.facebook.com/GOTOConferences
#eBPF #BPF #ExtendedBPF #Observability #Linux #GoLang #Kernel #BerkeleyPacketFilters #Demo #eBPFdemo

Looking for a unique learning experience?
Attend the next GOTO conference near you! Get your ticket at https://gotopia.tech

SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily.
https://www.youtube.com/user/GotoConferences/?sub_confirmation=1



Watch on YouTube