eBPF learning material(updating)

preparing for next learning...

Background and design

A thorough introduction to eBPF
An introduction to the BPF Compiler Collection
Early packet drop — and more — with BPF
XDP

Good to start

ebpf-beginners

eBPF tool

c

https://github.com/iovisor/bcc

go

libbpfgo
ebpf

Book

BPF Performance Tools

website

https://www.brendangregg.com/ebpf.html

supported eBPF program

What kind of eBPF program can be triggered by event, depends on the kernel version.

can be found in the bpf.h
https://elixir.bootlin.com/linux/v5.18/source/include/uapi/linux/bpf.h#L922

or use bpftool to find them

//todo

eBPF command

https://elixir.bootlin.com/linux/v5.18/source/include/uapi/linux/bpf.h#L840