Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security

27/09/2025 21 min
Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security

Listen "Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security"

Episode Synopsis

A powerful technology for programming the Linux kernel to enhance observability, networking, and security. It explains eBPF's fundamentals, including its virtual machine, instruction set, maps, and helper functions, along with the verifier that ensures program safety. The text details how eBPF programs are written in C (and increasingly Rust), compiled, and managed, often using the libbpf library for Compile-Once-Run-Everywhere (CO-RE) portability across different kernel versions. Furthermore, the book explores various eBPF program types and attachment points within the kernel, showcasing practical applications in areas like network security, load balancing, syscall monitoring, and tracing encrypted traffic.You can listen and download our episodes for free on more than 10 different platforms:https://linktr.ee/cyber_security_summaryGet the Book now from Amazon:https://www.amazon.com/Learning-eBPF-Programming-Observability-Networking/dp/1098135121?&linkCode=ll1&tag=cvthunderx-20&linkId=1d8689e476e5bd2466d5f05fd160ca22&language=en_US&ref_=as_li_ss_tlDiscover our free courses in tech and cybersecurity, Start learning today:https://linktr.ee/cybercode_academy

More episodes of the podcast CyberSecurity Summary