At its core, eBPF Programs are at the heart of how eBPF views and controls traffic. The eBPF technology is composed of bytecode that the kernel executes in response to specific events (a.k.a event-driven execution). Meaning the eBPF programs can be attached to various hook points in the kernel, allowing them to run in response to a specific event in the kernel. There's a lot of possibilities that stem from this event-driven execution. So many in fact, that eBPF was dubbed by Brendan Gregg as "superpowers for Linux!"

The Extended Berkeley Packet Filter (eBPF) is a tech innovation that allows user space applications to join the high-speed action of the operating system's kernel. It enables faster security operations and real-time policy tuning, acting as a force multiplier and boosting efficiency and adaptability by allowing user space functions to transition into kernel space.

Our most anticipated sessions paired with supporting content from wwt.com.