Unlock the kernel. Run sandboxed programs inside the OS kernel for high-performance networking, security, and observability using eBPF.
eBPF (Extended Berkeley Packet Filter) is the hottest technology in Linux infrastructure. It allows you to run code safely inside the kernel without changing source code or loading modules. This course teaches you to write BPF programs to trace system calls, filter network packets at high speed (XDP), and monitor performance. We use tools like BCC (BPF Compiler Collection) and bpftrace to gain superpowers in debugging and observability.
Estimated completion time: 21 lessons • Self-paced learning • Lifetime access
The tech is new mainstream; essential for cloud native.
Yes, requires understanding kernel event loops.
Yes, the Verifier prevents crashes/infinite loops.
Cilium, Falco, and advanced monitoring tools.