Mar 11, 2025 · Operations

Essential eBPF Tracing Performance Tuning: What Every Developer Must Know

This article analyzes eBPF tracing hook mechanisms—kprobe, tracepoint/raw_tp, and fentry—explaining their implementation, performance trade‑offs, kernel version support, and benchmark results, to guide developers in choosing the most efficient hook for production workloads.

KprobePerformance OptimizationeBPF

0 likes · 5 min read

Essential eBPF Tracing Performance Tuning: What Every Developer Must Know

Linux Kernel Journey

Dec 16, 2024 · Fundamentals

eBPF Talk: Manually Performing Backtrace in arm64 fentry

The article explains why backtracing with eBPF fentry on arm64 is harder than on x86, details the stack layout differences, shows how recent commits changed register saving, and provides a practical detection routine to locate the frame pointer and retrieve the tracee's instruction pointer.

ARM64BPFbacktrace

0 likes · 5 min read

eBPF Talk: Manually Performing Backtrace in arm64 fentry

BirdNest Tech Talk

Sep 15, 2024 · Operations

Capture Linux unlink Calls Using eBPF fentry/fexit – A Step‑by‑Step Guide

This article explains how to use eBPF fentry and fexit probes to monitor the Linux unlink system call, compares them with kprobes, provides complete C and Go examples, shows compilation with eunomia‑bpf, and discusses the low‑overhead advantages of fentry for kernel tracing.

CGoLinux

0 likes · 9 min read

Capture Linux unlink Calls Using eBPF fentry/fexit – A Step‑by‑Step Guide