Live briefing
Everything about EBPF
Runtime system for operating systems
eBPF is a technology that can run programs in a privileged context such as the operating system kernel. It is the successor to the Berkeley Packet Filter filtering mechanism in Linux and is also used in non-networking parts of the Linux kernel. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: EBPFA 5-minute orientation
- Skim a recent paper: Network shortcut in data plane of service mesh with eBPFInfluential work since 2022
- Pick up a classic book: CiliumThe most-reprinted book on the subject
- Read the landmark paper: Fast Packet Processing with eBPF and XDPCited 272 times
- Go sideways: Express Data PathA closely related topic
- Go sideways: Cilium (computing)A closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Fast Packet Processing with eBPF and XDP
A Framework for eBPF-Based Network Functions in an Era of Microservices
eBPF: A New Approach to Cloud-Native Observability, Networking and Security for Current (5G) and Future Mobile Networks (6G and Beyond)
Fast In-kernel Traffic Sketching in eBPF
Secure Inter-Container Communications Using XDP/eBPF
Leveraging eBPF to Make TCP Path-Aware
Machine learning-powered traffic processing in commodity hardware with eBPF
Detection of Denial of Service Attack in Cloud Based Kubernetes Using eBPF
🆕 Influential since 2022
Network shortcut in data plane of service mesh with eBPF
Detecting Cryptojacking Containers Using eBPF-Based Security Runtime and Machine Learning
Container Instrumentation and Enforcement System for Runtime Security of Kubernetes Platform with eBPF
A Control Plane Enabling Automated and Fully Adaptive Network Traffic Monitoring With eBPF
BRF: Fuzzing the eBPF Runtime
📚 Books worth reading
CiliumNico Vibert, Filip Nikolic · 2026
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Express Data Path XDP (eXpress Data Path) is an eBPF-based high-performance network data path used to send and receive network packets at high rates by bypassing most of…
- Cilium (computing) Cilium is a cloud native technology for networking, observability, and security. It is based on the kernel technology eBPF, originally for better networking…
- Berkeley Packet Filter The Berkeley Packet Filter (BPF; also BSD Packet Filter, classic BPF or cBPF) is a network tap mechanism and packet filter which permits computer network…
- Liz Rice Liz Rice is a British software engineer, author, and open-source technologist known for her work in cloud-native computing, Linux kernel technologies,…
- Network scheduler A network scheduler, also called packet scheduler, queueing discipline (qdisc) or queueing algorithm, is an arbiter on a node in a packet switching communicatio…
- GVisor gVisor is an open-source container sandbox developed by Google that focuses on security, efficiency, and ease of use. It provides virtualization-like isolation…
- Io uring Computer programming portal Linux portal io_uring is a Linux kernel system call interface for storage device asynchronous I/O operations. It addresses…
- Cloud Native Computing Foundation The Cloud Native Computing Foundation (CNCF) is a subsidiary of the Linux Foundation founded in 2015 to support cloud-native computing. It was announced…