BestHub
Sign in
Tagged articles
240 articles
Page 2 of 3
Sohu Tech Products
Sohu Tech Products
Sep 25, 2024 · Cloud Native

Observability Concepts and OpenTelemetry Architecture Overview

Observability turns a black‑box application into a system by gathering logs, metrics, and traces, using alerts to spot anomalies, then linking trace IDs to logs; OpenTelemetry standardizes this with instrumented client agents, a Collector (receivers, processors, exporters), and backend storage, while Java agents, span propagation, exemplars, eBPF, and bundles like SigNoz or OpenObserve let teams choose between a custom OTel stack or a solution.

Cloud NativeObservabilityOpenTelemetry
0 likes · 11 min read
Observability Concepts and OpenTelemetry Architecture Overview
BirdNest Tech Talk
BirdNest Tech Talk
Sep 12, 2024 · Fundamentals

Mastering eBPF with CO-RE: From Basics to Go Implementation

This article introduces eBPF fundamentals, explains the Compile‑Once‑Run‑Everywhere (CO‑RE) approach, compares it with traditional eBPF, outlines best practices, and walks through a complete Go‑based example using the Cilium/eBPF library and the eunomia‑bpf runtime.

CO-RECiliumGo
0 likes · 14 min read
Mastering eBPF with CO-RE: From Basics to Go Implementation
BirdNest Tech Talk
BirdNest Tech Talk
Sep 11, 2024 · Cloud Native

How to Build a Complete eBPF Development Environment on Ubuntu

This guide walks through the purpose, advantages, required Linux packages, Go libraries, exact installation commands, and version details needed to set up a functional eBPF development environment on an Ubuntu system, while explaining each step’s rationale.

Cloud NativeDevelopment EnvironmentGo
0 likes · 10 min read
How to Build a Complete eBPF Development Environment on Ubuntu
Xiaohongshu Tech REDtech
Xiaohongshu Tech REDtech
Sep 9, 2024 · Cloud Native

Applying eBPF for Cloud‑Native Observability and Continuous Profiling

By deploying eBPF agents as DaemonSets that hook kernel network and performance events, the Xiaohongshu observability team extended cloud‑native monitoring from the application to the kernel, delivering real‑time traffic analysis and low‑overhead continuous profiling for C++ services, aggregating data into centralized collectors for dashboards, flame‑graphs, and rapid root‑cause diagnosis.

KubernetesObservabilityPerformance Monitoring
0 likes · 37 min read
Applying eBPF for Cloud‑Native Observability and Continuous Profiling
Linux Kernel Journey
Linux Kernel Journey
Sep 7, 2024 · Operations

Building and Running an eBPF Application – Part 1

This article walks through creating a first eBPF program using C and Go on Ubuntu 22.04, covering required dependencies, kernel‑space vs user‑space concepts, event selection, BPF map definition, and a tracepoint function that measures per‑process CPU time.

BPF mapsCGo
0 likes · 11 min read
Building and Running an eBPF Application – Part 1
Alibaba Cloud Native
Alibaba Cloud Native
Sep 2, 2024 · Cloud Native

Why the New OpenTelemetry Golang Agent Beats Manual and eBPF Instrumentation

This article explains the challenges of manual OpenTelemetry SDK instrumentation and eBPF auto‑instrumentation for Go applications, introduces the Alibaba Cloud OpenTelemetry Golang Agent that performs compile‑time automatic instrumentation, details its architecture, code examples, plugin support, and future roadmap.

Automatic InstrumentationGolangOpenTelemetry
0 likes · 18 min read
Why the New OpenTelemetry Golang Agent Beats Manual and eBPF Instrumentation
Linux Kernel Journey
Linux Kernel Journey
Sep 2, 2024 · Backend Development

How eBPF Powers Modern Software Network Functions

The article examines why eBPF has become a core building block for cloud‑native network functions, outlines its performance, security and flexibility advantages, discusses technical challenges such as memory constraints and missing SIMD support, and presents the eNetSTL library that mitigates these issues with concrete design details and benchmark results.

Performance OptimizationeBPFeNetSTL
0 likes · 12 min read
How eBPF Powers Modern Software Network Functions
ByteDance SYS Tech
ByteDance SYS Tech
Aug 5, 2024 · Operations

How Netcap Uses eBPF to Trace Kernel Network Packets and Solve Drop Issues

Netcap, an open‑source eBPF‑based kernel network capture tool from ByteDance STE, lets developers trace packets across the entire Linux network stack, filter with tcpdump syntax, and extend functionality with custom filters, dramatically improving the efficiency of diagnosing kernel packet loss problems.

DebuggingLinux kernelPacket Capture
0 likes · 11 min read
How Netcap Uses eBPF to Trace Kernel Network Packets and Solve Drop Issues
Practical DevOps Architecture
Practical DevOps Architecture
Aug 2, 2024 · Cloud Native

In-depth Understanding of Kubernetes Networking: Architecture Design and Performance Optimization

This comprehensive course provides a deep dive into Kubernetes networking, covering core concepts, network models, policies, plugins, traffic management, security, multi‑tenant, cross‑cloud, and hybrid‑cloud designs, and offers hands‑on performance optimization techniques across more than 60 video modules.

CNICalicoCilium
0 likes · 4 min read
In-depth Understanding of Kubernetes Networking: Architecture Design and Performance Optimization
ByteDance SYS Tech
ByteDance SYS Tech
Jul 19, 2024 · Operations

Machine Learning, eBPF, and Zero‑Copy: Cutting‑Edge Linux Network Optimizations Revealed

The 2024 Netdev 0x18 conference in Santa Clara showcased six ByteDance STE presentations covering machine‑learning‑driven Nginx latency tuning, a novel zero‑copy notification, fine‑grained TCP tuning with eBPF, transparent shared‑memory communication, cross‑data‑center traffic management using AI, and asymmetric multi‑processing to cut network jitter.

eBPFperformance
0 likes · 10 min read
Machine Learning, eBPF, and Zero‑Copy: Cutting‑Edge Linux Network Optimizations Revealed
Linux Code Review Hub
Linux Code Review Hub
Jun 5, 2024 · Operations

Observing Virtio‑Net NIC Queues with eBPF: A Practical Guide

This article explains how to extend eBPF to make virtio‑net NIC queue metrics observable, walks through the front‑end send/receive flow, defines key queue indices, integrates the probes into the rtrace tool, and demonstrates fault detection with real‑time data.

Linux kernelNIC queueObservability
0 likes · 17 min read
Observing Virtio‑Net NIC Queues with eBPF: A Practical Guide
Linux Code Review Hub
Linux Code Review Hub
Jun 3, 2024 · Fundamentals

SCHED_EXT: The Extensible Kernel Scheduler Class for Custom Scheduling

The article provides a detailed technical overview of Linux's new extensible scheduler class SCHED_EXT, explaining its architecture, eBPF‑based customization interfaces, core data structures, queue management, scheduling points, and a central‑scheduler example, while comparing it with traditional CFS and per‑CPU run‑queues.

EEVDFLinux kernelScheduler
0 likes · 17 min read
SCHED_EXT: The Extensible Kernel Scheduler Class for Custom Scheduling
OPPO Kernel Craftsman
OPPO Kernel Craftsman
May 31, 2024 · Operations

An Overview of the Extensible Scheduler Class (sched_ext) in the Linux Kernel

The Linux kernel’s extensible scheduler class sched_ext introduces a new ext_sched_class with eBPF‑driven callbacks and dispatch queues, allowing developers to plug custom scheduling policies via struct sched_ext_ops without recompiling the kernel, while integrating into the existing hierarchy and exposing trade‑offs such as central‑CPU load and community adoption challenges.

CPU schedulingeBPFextensible scheduler
0 likes · 16 min read
An Overview of the Extensible Scheduler Class (sched_ext) in the Linux Kernel
Cognitive Technology Team
Cognitive Technology Team
May 23, 2024 · Operations

eBPF + LLM: Building the Infrastructure for Observability Agents

The article explains how zero‑intrusion eBPF provides full‑stack, high‑quality observability data that, when combined with large language models, enables AI‑driven agents to automate ticket handling, change impact analysis, and vulnerability triage, dramatically improving operational efficiency.

AI AgentDistributed TracingLLM
0 likes · 17 min read
eBPF + LLM: Building the Infrastructure for Observability Agents
Alibaba Cloud Native
Alibaba Cloud Native
Apr 25, 2024 · Cloud Native

How Terway DataPath V2 Boosts Kubernetes Network Observability

This article examines the Terway DataPath V2 mode in Alibaba Cloud Kubernetes, detailing its architecture, data‑plane forwarding paths, eBPF acceleration, and eight typical traffic scenarios across different ENI and node configurations, while providing practical command‑line examples and performance insights.

DataPath V2KubernetesNetwork Observability
0 likes · 23 min read
How Terway DataPath V2 Boosts Kubernetes Network Observability
ByteDance SYS Tech
ByteDance SYS Tech
Apr 19, 2024 · Fundamentals

How xcap Uses eBPF to Revolutionize Kernel Network Packet Capture

The article introduces xcap, an eBPF‑based next‑generation kernel network packet capture tool that overcomes the limitations of traditional utilities like tcpdump by providing flexible hook points, customizable filtering, and support for diverse network scenarios such as AF_XDP and DPDK, thereby dramatically improving packet‑loss debugging efficiency.

BPF tracingLinux networkingeBPF
0 likes · 10 min read
How xcap Uses eBPF to Revolutionize Kernel Network Packet Capture
Alibaba Cloud Big Data AI Platform
Alibaba Cloud Big Data AI Platform
Mar 18, 2024 · Operations

Build Pure‑C eBPF Projects with Native libbpf – No libbpf‑bootstrap Needed

This article walks through constructing pure‑C eBPF programs using the native libbpf library, covering kernel‑libbpf version mapping, environment setup for RPM and DEB systems, detailed Makefile analysis, embedding BPF objects via hexdump, and extending the approach to USDT and Uprobe tracing without relying on libbpf‑bootstrap.

C programmingLinux kernelSystem Tracing
0 likes · 40 min read
Build Pure‑C eBPF Projects with Native libbpf – No libbpf‑bootstrap Needed
21CTO
21CTO
Mar 2, 2024 · Fundamentals

How Rust and eBPF Enable User‑Space Linux Schedulers: The scx_rustland Experiment

Ubuntu kernel engineer Andrea Righi created scx_rustland, a Rust‑written Linux scheduler that runs in user space and can be hot‑plugged at runtime via eBPF, showcasing the flexibility, safety, and potential for micro‑kernel designs while allowing workload‑specific optimizations.

Linux schedulerRustUser-space Kernel
0 likes · 4 min read
How Rust and eBPF Enable User‑Space Linux Schedulers: The scx_rustland Experiment
21CTO
21CTO
Feb 27, 2024 · Fundamentals

Can a Rust-Based Linux Scheduler Outperform the Default C Scheduler?

An Ubuntu kernel engineer built a Rust scheduler using eBPF, achieving twice the frame rate in a game while only modestly increasing compile time, sparking debate on Rust versus C for kernel components and the future of dynamic, BPF‑driven scheduling in Linux.

Linux schedulerRusteBPF
0 likes · 8 min read
Can a Rust-Based Linux Scheduler Outperform the Default C Scheduler?
Linux Code Review Hub
Linux Code Review Hub
Jan 31, 2024 · Fundamentals

Is POSIX Coming to an End? A Historical Review and Future Outlook

The article surveys the evolution of POSIX abstractions from the 1970s to the present, explains why hardware trends and modern workloads expose limitations of the CPU‑centric model, and argues that a new set of higher‑level interfaces is needed for future systems.

I/O abstractionsOperating SystemsPOSIX
0 likes · 25 min read
Is POSIX Coming to an End? A Historical Review and Future Outlook
Linux Code Review Hub
Linux Code Review Hub
Jan 29, 2024 · Cloud Native

How Minsheng Bank Built eBPF‑Based Observability for Cloud‑Native Services

The article details Minsheng Bank's step‑by‑step journey from traditional network monitoring to a full‑stack, zero‑intrusion observability platform built with DeepFlow, vTap, distributed data collection, and eBPF, illustrating concrete case studies and future plans for expanding business‑level monitoring.

Cloud NativeDeepFlowDistributed Tracing
0 likes · 18 min read
How Minsheng Bank Built eBPF‑Based Observability for Cloud‑Native Services
Linux Code Review Hub
Linux Code Review Hub
Jan 23, 2024 · Industry Insights

2024 eBPF and Networking Trends Forecast

The article forecasts rapid eBPF adoption across cloud‑native networking, mobile devices, and observability, highlights emerging eBPF marketplaces, discusses performance gains with NetKit and BIG TCP, predicts IPv6‑first Kubernetes clusters, AI‑assisted network troubleshooting, and the growing convergence of platform engineering and networking in 2024.

CiliumKubernetesNetworking
0 likes · 16 min read
2024 eBPF and Networking Trends Forecast
Linux Code Review Hub
Linux Code Review Hub
Jan 18, 2024 · Cloud Native

How to Build Unified Observability for Apache APISIX with DeepFlow

This article walks through deploying Apache APISIX and DeepFlow in a Kubernetes cluster, configuring eBPF‑based AutoTracing and OpenTelemetry integration, enabling Prometheus metrics, accessing logs and continuous profiling, and visualizing unified observability data via Grafana dashboards.

APISIXDeepFlowKubernetes
0 likes · 16 min read
How to Build Unified Observability for Apache APISIX with DeepFlow
Bilibili Tech
Bilibili Tech
Dec 8, 2023 · Operations

Design and Implementation of Nickel: A High‑Performance Edge Four‑Layer Load Balancer Based on XDP

Nickel is a high‑performance, XDP‑based four‑layer edge load balancer that replaces Bilibili’s non‑clustered CDN architecture with a co‑deployed control plane and data plane, using hash‑based forwarding, dynamic health‑checks, and two‑hop routing to lower cost, improve load distribution, and eliminate dedicated load‑balancer machines.

CDNLoad BalancerXDP
0 likes · 15 min read
Design and Implementation of Nickel: A High‑Performance Edge Four‑Layer Load Balancer Based on XDP
Ops Development Stories
Ops Development Stories
Nov 20, 2023 · Operations

How eBPF Powers Next‑Gen Observability and Fault Diagnosis in Kubernetes

At KubeCon China 2023, experts Liu Kai and Dong Shandong presented a three‑part deep dive into Kubernetes observability challenges, demonstrating how eBPF enables comprehensive data collection across all stack layers, seamless integration, and intelligent root‑cause analysis through dimension attribution, anomaly bounding, and fault‑tree methods.

Cloud NativeFault DiagnosisKubernetes
0 likes · 20 min read
How eBPF Powers Next‑Gen Observability and Fault Diagnosis in Kubernetes
Alibaba Cloud Native
Alibaba Cloud Native
Nov 18, 2023 · Cloud Native

How eBPF Powers Next‑Gen Observability and Root‑Cause Analysis in Kubernetes

This talk explains the three major observability challenges in Kubernetes, demonstrates how eBPF enables comprehensive, low‑overhead data collection across all stack layers, and outlines a practical workflow that combines architecture awareness, application‑level metrics, and fault‑tree analysis to achieve automated root‑cause diagnosis.

Fault DiagnosisKuberneteseBPF
0 likes · 21 min read
How eBPF Powers Next‑Gen Observability and Root‑Cause Analysis in Kubernetes
OPPO Kernel Craftsman
OPPO Kernel Craftsman
Nov 1, 2023 · Fundamentals

Recap of the 18th China Linux Kernel Developers Conference (CLK 2023)

On October 28 2023, the 18th China Linux Kernel Developers Conference gathered nearly 500 developers in Shenzhen, livestreamed to over 180,000 viewers, featured keynote talks on kernel scheduling, AI‑driven evolution, Rust integration, and cloud‑hardware co‑design, and offered sub‑forums on memory, virtualization, I/O, and eBPF, with all materials now publicly available.

RustconferenceeBPF
0 likes · 8 min read
Recap of the 18th China Linux Kernel Developers Conference (CLK 2023)
Network Intelligence Research Center (NIRC)
Network Intelligence Research Center (NIRC)
Oct 11, 2023 · Cloud Native

How XDP Is Redefining Network Performance Beyond Traditional Stacks

This article examines XDP (eXpress Data Path), a Linux kernel eBPF‑based technology that pushes packet processing to the earliest point in the network interface, delivering ultra‑low latency, enhanced security, and flexible custom processing for high‑performance routing, DDoS mitigation, and cloud environments.

Cloud NativeLinux kernelXDP
0 likes · 5 min read
How XDP Is Redefining Network Performance Beyond Traditional Stacks
Tencent Architect
Tencent Architect
Sep 27, 2023 · Cloud Native

OpenCloudOS Cloud‑Native Practices, Resource Utilization Enhancements, and Testing Framework Overview

The article introduces OpenCloudOS’s cloud‑native initiatives—including a mixed‑workload CPU QoS scheduler, the RUE resource‑utilization enhancement, the eBPF‑based nettrace network‑diagnosis tool, and the TCase/TSuite testing platform—highlighting how these innovations improve CPU utilization, cut costs, and ensure high‑quality releases.

LinuxOpen-sourceeBPF
0 likes · 14 min read
OpenCloudOS Cloud‑Native Practices, Resource Utilization Enhancements, and Testing Framework Overview
OPPO Kernel Craftsman
OPPO Kernel Craftsman
Sep 22, 2023 · Mobile Development

Advances in Android Memory Optimization and Linux Kernel Techniques Presented at CCF ESTC 2023

At the 2023 CCF ESTC conference, OPPO showcased its 64 KB dynamic large‑page technology that can increase memory‑access bandwidth up to sixteenfold and improve app startup and frame rates, while also co‑hosting a Linux‑kernel forum on scheduler, lock contention, memory defragmentation and hot‑cold page optimization, underscoring the company’s push for industry‑academic collaboration and future OS research.

AndroidDynamic Large PagesMemory Optimization
0 likes · 8 min read
Advances in Android Memory Optimization and Linux Kernel Techniques Presented at CCF ESTC 2023
Alibaba Cloud Native
Alibaba Cloud Native
Sep 7, 2023 · Cloud Native

Unlock Real‑Time Container Network Monitoring with KubeSkoop’s eBPF Probes

This article explains how KubeSkoop leverages eBPF to provide low‑overhead, pod‑level network monitoring and real‑time diagnostics for Kubernetes clusters, covering packet flow fundamentals, traditional troubleshooting tool limitations, the exporter’s probe architecture, daily monitoring practices, and future development plans.

GrafanaKubeSkoopKubernetes
0 likes · 22 min read
Unlock Real‑Time Container Network Monitoring with KubeSkoop’s eBPF Probes
Baidu Geek Talk
Baidu Geek Talk
Sep 6, 2023 · Cloud Native

DeeTune: Baidu’s eBPF‑Based Cloud‑Native Network Framework for Service Topology, Traffic Recording, and Non‑Intrusive Monitoring

DeeTune is Baidu’s eBPF‑based cloud‑native network framework that automatically builds complete service topologies, records configurable inter‑service traffic, and provides non‑intrusive metric monitoring with minimal CPU and memory overhead, enabling efficient fault localization and performance analysis across heterogeneous PaaS and container environments.

BaiduNetwork FrameworkObservability
0 likes · 15 min read
DeeTune: Baidu’s eBPF‑Based Cloud‑Native Network Framework for Service Topology, Traffic Recording, and Non‑Intrusive Monitoring
OPPO Kernel Craftsman
OPPO Kernel Craftsman
Sep 1, 2023 · Operations

eBPF Program Injection into the Kernel (Part 1)

The article walks through the complete eBPF injection workflow—opening a skeleton, loading and JIT‑compiling the program with bpf_object__load_skeleton, attaching it to a kernel kprobe via perf_event_open_probe and bpf_link_create, and finally triggering the probe so the JIT‑compiled eBPF code runs inside the kernel.

KernelProfilingeBPF
0 likes · 20 min read
eBPF Program Injection into the Kernel (Part 1)
MaGe Linux Operations
MaGe Linux Operations
Aug 11, 2023 · Operations

How eBPF Transformed Linux: From BPF Roots to Modern Observability

This article traces the evolution of eBPF from its BPF predecessor, explains its kernel requirements, security model, probe mechanisms, performance impact, tracing capabilities, and potential event‑loss risks, and looks ahead to its expanding role in networking and system observability.

Linux kernelObservabilityeBPF
0 likes · 11 min read
How eBPF Transformed Linux: From BPF Roots to Modern Observability
Didi Tech
Didi Tech
Aug 3, 2023 · Cloud Native

eBPF-Based Cross-Language Non-Intrusive Traffic Recording for Cloud-Native Services

The article describes an eBPF‑based, language‑agnostic traffic recording framework that hooks low‑level socket operations and thread identifiers to capture complete request‑response flows across Java, PHP, and Go services without modifying application code, dramatically lowering implementation and maintenance costs for cloud‑native traffic replay.

Cloud NativeGoObservability
0 likes · 15 min read
eBPF-Based Cross-Language Non-Intrusive Traffic Recording for Cloud-Native Services
DevOps
DevOps
Jul 28, 2023 · Operations

The Temporary End of Moore’s Law and the Revival of “Systems Performance”

The article discusses the renewed relevance of performance engineering amid the slowdown of Moore’s Law, highlighting the Chinese edition of "Systems Performance: Enterprise and the Cloud," modern observability tools like eBPF, the "golden 60‑second" analysis, and the push toward continuous performance monitoring and expert systems.

ObservabilitySystemseBPF
0 likes · 7 min read
The Temporary End of Moore’s Law and the Revival of “Systems Performance”
AI Cyberspace
AI Cyberspace
Jul 5, 2023 · Cloud Native

From Service Mesh 1.0 to 2.0: Solving Envoy Pain Points and Shaping the Future

This article traces the evolution of service mesh from its early concepts through microservice 1.0 and 2.0, analyzes the shortcomings of Envoy‑based sidecars, and explores future directions such as Go‑based data planes, WASM plugins, eBPF/VPP acceleration, QUIC transport, and on‑demand xDS delivery.

EnvoyQUICService Mesh
0 likes · 17 min read
From Service Mesh 1.0 to 2.0: Solving Envoy Pain Points and Shaping the Future
Didi Tech
Didi Tech
Jul 4, 2023 · Cloud Native

eBPF Technology and Its Application in Didi's Cloud-Native Observability: HuaTuo Platform Practice

eBPF, a safe, high‑performance Linux kernel extension evolving from the 1993 Berkeley Packet Filter to modern dynamic tracing, underpins Didi’s HuaTuo platform, which consolidates bytecode management, fast data processing, stability self‑healing, and container insight to solve traffic replay, topology, security, and root‑cause analysis challenges across cloud‑native services, with plans to broaden business use and community collaboration.

Container SecurityHuatuoObservability
0 likes · 12 min read
eBPF Technology and Its Application in Didi's Cloud-Native Observability: HuaTuo Platform Practice
Alibaba Cloud Native
Alibaba Cloud Native
Jun 27, 2023 · Cloud Native

How KubeSkoop Automates Kubernetes Network Troubleshooting

KubeSkoop, an open‑source tool from Alibaba Cloud, automates Kubernetes container network diagnosis by building traffic paths, collecting eBPF and IaaS data, and pinpointing root causes for connectivity and jitter issues, supporting major CNI plugins and offering deep network monitoring with Prometheus integration.

CNICloud NativeKubernetes
0 likes · 10 min read
How KubeSkoop Automates Kubernetes Network Troubleshooting
Bitu Technology
Bitu Technology
Jun 14, 2023 · Operations

Getting Started with eBPF: Concepts, Examples, and Security Considerations

This article reviews the fundamentals of eBPF, explains its architecture and tracing mechanisms such as USDT, uprobes, and TC hooks, provides practical code examples, discusses security aspects, and lists notable open‑source projects that leverage eBPF for performance and observability.

KernelLinuxObservability
0 likes · 9 min read
Getting Started with eBPF: Concepts, Examples, and Security Considerations
Liangxu Linux
Liangxu Linux
Jun 11, 2023 · Operations

Mastering Linux Kernel Tracing: From Kprobes to eBPF

This article explains Linux kernel tracing tools—including kprobes, kretprobes, uprobes, tracepoints, ftrace, perf, and eBPF—detailing how probe handlers are injected, how events are recorded via TraceFS, and which technique best fits different debugging and performance‑analysis scenarios.

KernelTracingKprobesLinux
0 likes · 44 min read
Mastering Linux Kernel Tracing: From Kprobes to eBPF
OPPO Kernel Craftsman
OPPO Kernel Craftsman
May 12, 2023 · Mobile Development

eBPF Technology and Its Application on Android Platform

The article explains Android’s emerging eBPF support, detailing how to write, compile, load, attach, and debug BPF programs—including map handling, permission controls, perf‑event reporting, and practical debugging steps—while highlighting its current preliminary status and vast potential for kernel‑level monitoring on mobile devices.

AndroidBPF mapsKernel Extension
0 likes · 9 min read
eBPF Technology and Its Application on Android Platform
ITPUB
ITPUB
Apr 23, 2023 · Cloud Native

How Kindling Leverages eBPF to Reach 1‑5‑10 Observability Targets

This article examines the difficulty of achieving the 1‑5‑10 observability goal, reviews current tracing, logging, and metrics tools, introduces the open‑source Kindling project’s eBPF‑based trace‑profiling approach, and walks through several real‑world use cases that demonstrate faster root‑cause analysis in cloud‑native environments.

KindlingObservabilityRoot Cause Analysis
0 likes · 16 min read
How Kindling Leverages eBPF to Reach 1‑5‑10 Observability Targets
System Architect Go
System Architect Go
Apr 3, 2023 · Cloud Native

Why Cilium Beats Flannel: Real‑World Kubernetes Networking Insights

The article analyzes how Cilium’s eBPF‑based architecture, advanced network policies, cluster‑wide traffic control, and observability tools like Hubble solved performance, security, and scalability challenges that Flannel and kube‑proxy could not meet in production Kubernetes environments.

CNICiliumCloud Native
0 likes · 12 min read
Why Cilium Beats Flannel: Real‑World Kubernetes Networking Insights
ITPUB
ITPUB
Mar 16, 2023 · Cloud Native

How Kindling Leverages eBPF for Minute‑Level Fault Diagnosis in Cloud‑Native Environments

The interview with Kindling founder Cheng Chan explores how eBPF‑based Kindling tackles the overwhelming metrics, high expertise barrier, and lack of real‑time protocol parsing in cloud‑native observability, detailing its probe architecture, protocol analysis, and roadmap for faster, standardized root‑cause detection.

Cloud NativeKindlingKubernetes
0 likes · 13 min read
How Kindling Leverages eBPF for Minute‑Level Fault Diagnosis in Cloud‑Native Environments
Ops Development Stories
Ops Development Stories
Feb 6, 2023 · Cloud Native

How to Deploy Odigos for Zero‑Code Observability on Kubernetes

This guide walks you through installing and configuring the open‑source Odigos observability control plane on a Kubernetes cluster, showing how to automatically collect traces, metrics, and logs from applications without modifying code and how to visualize the data with Grafana.

KubernetesOdigosOpenTelemetry
0 likes · 11 min read
How to Deploy Odigos for Zero‑Code Observability on Kubernetes
Open Source Linux
Open Source Linux
Feb 3, 2023 · Cloud Native

Why eBPF Is the Secret Weapon Behind Modern Cloud‑Native Platforms

This article explains how eBPF extends kernel functionality to enable secure, high‑performance networking, observability, and programmable workloads in cloud‑native environments, detailing its architecture, use cases, market adoption, commercialization models, and the challenges and advantages that make it comparable to JavaScript for the kernel.

Cloud NativeLinuxNetworking
0 likes · 12 min read
Why eBPF Is the Secret Weapon Behind Modern Cloud‑Native Platforms
Tencent Cloud Developer
Tencent Cloud Developer
Jan 10, 2023 · Cloud Native

nettrace: An eBPF‑Based Tool for Network Packet Tracing, Diagnosis and Drop Monitoring in Cloud‑Native Environments

nettrace is an eBPF‑powered command‑line utility that traces a packet’s full kernel lifecycle, diagnoses network faults with a built‑in knowledge base, monitors anomalies and skb drops, supports NAT, GRE, IPVS and netfilter hooks, and replaces legacy tools like tcpdump and droptrace in cloud‑native Linux environments.

Linuxcloud-nativediagnosis
0 likes · 33 min read
nettrace: An eBPF‑Based Tool for Network Packet Tracing, Diagnosis and Drop Monitoring in Cloud‑Native Environments
Bilibili Tech
Bilibili Tech
Dec 27, 2022 · Operations

Optimizing QUIC Gateway Performance with AF_XDP

Bilibili’s video CDN replaced its traditional TCP‑based gateway with a QUIC/HTTP‑3 gateway and, to curb the extra CPU load caused by complex UDP handling, adopted AF_XDP kernel‑bypass sockets that redirect packets via XDP, cutting CPU usage by about half, raising peak bandwidth to roughly 9 Gbps and improving per‑bandwidth efficiency by up to 30 %.

AF_XDPLinux kernelQUIC
0 likes · 14 min read
Optimizing QUIC Gateway Performance with AF_XDP
Top Architect
Top Architect
Dec 26, 2022 · Operations

An Introduction to eBPF: Concepts, Use Cases, and Practical Examples

This article provides a comprehensive overview of eBPF, explaining its origins, core concepts, comparison with SystemTap and DTrace, common use cases such as network monitoring, security filtering, and performance analysis, and includes step‑by‑step Python examples with BCC for tracing and latency measurement.

BCCLinux kernelNetwork Monitoring
0 likes · 21 min read
An Introduction to eBPF: Concepts, Use Cases, and Practical Examples
IT Architects Alliance
IT Architects Alliance
Dec 24, 2022 · Operations

Unlocking Linux Observability: A Hands‑On Guide to eBPF with Real‑World Examples

This article introduces eBPF, explains its origins and how it extends BPF for kernel‑level observability, compares it with SystemTap and DTrace, outlines common use cases, details its loading‑compile‑execute workflow, and provides step‑by‑step Python/BCC examples with installation instructions and advanced latency measurement code.

BCCKernelLinux
0 likes · 21 min read
Unlocking Linux Observability: A Hands‑On Guide to eBPF with Real‑World Examples
Architect
Architect
Dec 22, 2022 · Operations

An Introduction to eBPF: Concepts, Use Cases, and Sample Programs

This article explains what eBPF (extended Berkeley Packet Filter) is, compares it with related tracing tools, describes its core mechanisms and common applications such as network monitoring, security filtering and performance analysis, and provides step‑by‑step Python examples with installation instructions and further reading resources.

BCCLinuxPython
0 likes · 20 min read
An Introduction to eBPF: Concepts, Use Cases, and Sample Programs
政采云技术
政采云技术
Nov 7, 2022 · Cloud Native

Deployment Architecture of a Government Procurement Cloud Platform Based on Dragonfly OS

The article details Zhengcaiyun's government procurement cloud platform, its large‑scale architecture, migration to the domestically‑adapted Dragonfly operating system, integrated cloud‑native operations, observability built on OpenTelemetry, and ongoing efforts to enhance security, performance, and ecosystem collaboration.

Dragonfly OSObservabilitycloud-native
0 likes · 7 min read
Deployment Architecture of a Government Procurement Cloud Platform Based on Dragonfly OS
政采云技术
政采云技术
Nov 7, 2022 · Cloud Native

Deployment Architecture of a Government Procurement Cloud Platform Based on the Longxi Operating System

The article details Zhengcaiyun's government procurement cloud platform, its large‑scale deployment architecture built on the Longxi OS, covering cloud‑native design, domestic adaptation, observability, and operational practices that enable high‑performance, secure, and scalable public procurement services.

Observabilitycloud-nativeeBPF
0 likes · 6 min read
Deployment Architecture of a Government Procurement Cloud Platform Based on the Longxi Operating System
ByteDance SYS Tech
ByteDance SYS Tech
Nov 1, 2022 · Operations

How eBPF Can Cut Container Network Latency by Up to 82%

Using eBPF to bypass traditional bridge, netfilter, and routing steps, this article demonstrates how container network packet forwarding can be accelerated, reducing receive and transmit latency by around 40‑82%, with detailed perf‑ftrace analysis, code examples, and performance comparisons of three forwarding modes.

Linux kernelcontainer networkingeBPF
0 likes · 14 min read
How eBPF Can Cut Container Network Latency by Up to 82%
Cloud Native Technology Community
Cloud Native Technology Community
Oct 27, 2022 · Cloud Native

Boost Kubernetes Pod‑to‑Pod Performance with istio‑tcpip‑bypass and eBPF

This article explains how the Intel istio‑tcpip‑bypass plugin leverages eBPF to bypass the host TCP/IP stack for intra‑node pod communication, provides environment setup, step‑by‑step deployment commands, and shows benchmark results that demonstrate 40‑80% latency reduction and throughput improvement.

Kube-OVNKubernetesPerformance Testing
0 likes · 6 min read
Boost Kubernetes Pod‑to‑Pod Performance with istio‑tcpip‑bypass and eBPF
Cloud Native Technology Community
Cloud Native Technology Community
Sep 23, 2022 · Cloud Native

What Cloud‑Native Networking Trends Kube‑OVN Reveals and How DeepFlow Enables Full‑Stack Observability

In this technical session, experts from Lingque Cloud and Yunshan Network discuss emerging cloud‑native networking trends through Kube‑OVN, demonstrate DeepFlow's full‑stack observability in Kube‑OVN environments, and answer a wide range of practical Q&A covering IP stability, underlay challenges, CNI support, and performance tuning.

CNICloud Native NetworkingDeepFlow
0 likes · 14 min read
What Cloud‑Native Networking Trends Kube‑OVN Reveals and How DeepFlow Enables Full‑Stack Observability
Efficient Ops
Efficient Ops
Sep 7, 2022 · Operations

How DeepFlow Automates Full‑Stack Observability for Cloud‑Native Environments

This article presents DeepFlow, an open‑source, highly automated observability platform that uses eBPF to provide zero‑code AutoMetrics and AutoTracing, integrates with Prometheus, OpenTelemetry and SkyWalking, and enables SRE, DevOps and NewOps teams to build full‑stack metrics and blind‑spot‑free tracing for cloud‑native applications.

DevOpsObservabilitycloud-native
0 likes · 20 min read
How DeepFlow Automates Full‑Stack Observability for Cloud‑Native Environments
OPPO Kernel Craftsman
OPPO Kernel Craftsman
Jul 1, 2022 · Operations

Linux Kernel Performance Profiling: A Comprehensive Guide to On-CPU and Off-CPU Analysis

This comprehensive guide explains Linux kernel performance profiling—both on‑CPU and off‑CPU—by stressing the need to target the critical 3 % of code, covering throughput, latency and power metrics, scalability laws, flame‑graph visualizations, perf and eBPF tools, lock‑contention analysis, and further reading recommendations.

Linux kernelThroughputeBPF
0 likes · 27 min read
Linux Kernel Performance Profiling: A Comprehensive Guide to On-CPU and Off-CPU Analysis
MaGe Linux Operations
MaGe Linux Operations
Jun 27, 2022 · Operations

Mastering pwru: Deep Dive into Cilium’s eBPF Packet Tracing Tool

This article introduces pwru, Cilium’s eBPF‑based network packet tracing utility, covering installation prerequisites, command‑line options, real‑world debugging scenarios, and the underlying implementation that leverages kprobes, eBPF maps, and perf events to filter and display packet data.

CiliumLinux kerneleBPF
0 likes · 9 min read
Mastering pwru: Deep Dive into Cilium’s eBPF Packet Tracing Tool
Alibaba Cloud Developer
Alibaba Cloud Developer
Jun 8, 2022 · Fundamentals

eBPF Explained: Core Concepts, Use Cases, and Best Practices

eBPF is a kernel‑level sandbox technology that enables safe, high‑performance, programmable instrumentation for networking, security, and observability, and this article answers seven key questions covering its definition, applications, origins, usage steps, implementation details, best practices, and current ecosystem.

Kernel InstrumentationLinuxObservability
0 likes · 21 min read
eBPF Explained: Core Concepts, Use Cases, and Best Practices
Meituan Technology Team
Meituan Technology Team
Apr 7, 2022 · Information Security

Malicious Use of eBPF in Cloud‑Native Environments: Threats, Detection, and Defense

While eBPF powers modern cloud‑native networking and observability, attackers can exploit its kernel hooks to create stealthy rootkits that manipulate packets, rewrite files, and persist across reboots, so security teams must harden privileges, monitor BPF syscalls, audit loaded programs, and employ signature verification and LSM controls to detect and mitigate these threats.

DetectionRootkitcloud-native security
0 likes · 30 min read
Malicious Use of eBPF in Cloud‑Native Environments: Threats, Detection, and Defense
Cloud Native Technology Community
Cloud Native Technology Community
Mar 29, 2022 · Cloud Native

Can eBPF Replace Netfilter? Boosting Kubernetes Network Performance

This article examines the performance limitations of Kubernetes pod, service, and network‑policy layers built on the kernel Netfilter framework, explores eBPF‑based alternatives such as tc‑ebpf and Cilium, describes a Terway‑with‑eBPF implementation, and presents benchmark results showing significant latency and scalability improvements.

CNIService MeshTerway
0 likes · 13 min read
Can eBPF Replace Netfilter? Boosting Kubernetes Network Performance
Cloud Native Technology Community
Cloud Native Technology Community
Mar 22, 2022 · Cloud Native

Evaluating eBPF’s Role in Service Mesh Data Plane: Architecture Trade‑offs

This article examines how eBPF can enhance service‑mesh data planes, compares four deployment models—including sidecar, node‑shared, service‑account‑shared, and micro‑proxy architectures—and evaluates each model’s memory, isolation, security, and upgrade trade‑offs while emphasizing Envoy’s continued L7 responsibilities.

Cloud NativeData PlaneEnvoy
0 likes · 11 min read
Evaluating eBPF’s Role in Service Mesh Data Plane: Architecture Trade‑offs
Efficient Ops
Efficient Ops
Mar 15, 2022 · Cloud Native

How eBPF Powers Seamless Observability in Cloud‑Native Kubernetes Environments

This article explains why the rise of Kubernetes as a cloud‑native standard brings new observability challenges, outlines how eBPF enables non‑intrusive, multi‑language, multi‑protocol data collection, and describes a comprehensive monitoring stack—including golden metrics, service topology, tracing, alerts, and network diagnostics—to achieve end‑to‑end visibility in complex Kubernetes deployments.

Cloud NativeKubernetesOperations
0 likes · 22 min read
How eBPF Powers Seamless Observability in Cloud‑Native Kubernetes Environments
IT Services Circle
IT Services Circle
Mar 14, 2022 · Fundamentals

Understanding Localhost (127.0.0.1) Network I/O in the Linux Kernel

This article explains in detail how Linux handles local network I/O for 127.0.0.1, comparing it with cross‑machine communication, describing the routing, device subsystem, driver code, and soft‑interrupt processing, and concluding with performance considerations and a discussion on eBPF acceleration.

KernelLinuxNetwork I/O
0 likes · 16 min read
Understanding Localhost (127.0.0.1) Network I/O in the Linux Kernel
Tencent Cloud Middleware
Tencent Cloud Middleware
Mar 10, 2022 · Cloud Native

How eBPF Can Replace iptables to Boost Service Mesh Performance

This article explains how replacing the traditional iptables‑based sidecar traffic‑hijacking in Istio with eBPF programs and sockmap can cut CPU usage, increase QPS and lower latency, while detailing the implementation, architecture, and performance results on Kubernetes.

Cloud NativeKuberneteseBPF
0 likes · 13 min read
How eBPF Can Replace iptables to Boost Service Mesh Performance
Ops Development Stories
Ops Development Stories
Mar 4, 2022 · Cloud Native

Why Observability Is the ‘Force’ Empowering Modern IT Systems

This talk explains why observability is essential for cloud‑native IT systems, covering its core value of empowerment, various definitions, evaluation criteria such as zero‑intrusion, multidimensionality and real‑time response, and practical building approaches using SaaS, open‑source and integration, illustrated with numerous industry case studies.

OLAPSaaSeBPF
0 likes · 24 min read
Why Observability Is the ‘Force’ Empowering Modern IT Systems
Efficient Ops
Efficient Ops
Feb 14, 2022 · Cloud Native

How Merbridge Uses eBPF to Accelerate Istio Traffic: A Deep Dive

Merbridge, an open‑source project, replaces Istio’s iptables‑based traffic handling with eBPF sockops and redir, dramatically reducing kernel processing steps, improving latency and QPS, and providing seamless integration without modifying existing Istio configurations.

IstioNetwork AccelerationService Mesh
0 likes · 12 min read
How Merbridge Uses eBPF to Accelerate Istio Traffic: A Deep Dive
OPPO Kernel Craftsman
OPPO Kernel Craftsman
Feb 11, 2022 · Operations

Overview and Implementation of eBPF for Android Network Statistics and Control

The article explains how Android’s shift to Linux kernel 4.x/5.x introduced the eBPF framework, detailing its advantages over iptables, the programming model with helper macros and maps, and its implementation in netd and HAL to collect network statistics, enforce traffic control, and support power‑saving Doze policies.

AndroidBPFNetwork Monitoring
0 likes · 8 min read
Overview and Implementation of eBPF for Android Network Statistics and Control
Liangxu Linux
Liangxu Linux
Jan 23, 2022 · Operations

Master Linux Tracing with bpftrace: Install, Run, and Explore Built‑in Tools

bpftrace is a Linux eBPF‑based tracing tool that compiles scripts to BPF bytecode, offering kernel and user‑space probes; the guide covers its purpose, installation on major distros and Docker, and demonstrates built‑in example scripts for command logging, I/O latency, disk size, CPU usage, and TCP connection tracing.

Linux tracingPerformance Monitoringbpftrace
0 likes · 7 min read
Master Linux Tracing with bpftrace: Install, Run, and Explore Built‑in Tools
Rare Earth Juejin Tech Community
Rare Earth Juejin Tech Community
Jan 14, 2022 · Cloud Native

Service Mesh in 2021: Progress, Challenges, and Ecosystem Development

During 2021, the service‑mesh ecosystem—centered on Istio—matured with performance optimizations, protocol extensions, diverse deployment models, eBPF integration, and a growing community of tutorials, conferences, and open‑source projects, solidifying its role as essential cloud‑native networking infrastructure.

IstioPerformance OptimizationService Mesh
0 likes · 11 min read
Service Mesh in 2021: Progress, Challenges, and Ecosystem Development