BestHub
Sign in
Tagged articles
22 articles
Page 1 of 1
Didi Tech
Didi Tech
Aug 7, 2025 · Cloud Native

How HUATUO Revolutionizes Cloud‑Native Observability with Zero‑Impact BPF Tracing

HUATUO, Didi's open‑source cloud‑native observability project, leverages BPF‑based low‑overhead kernel tracing, unified metric and event frameworks, automatic flame‑graph generation, and seamless integration with Prometheus, Grafana and Elasticsearch to provide panoramic, zero‑intrusive monitoring and continuous performance profiling for complex production environments.

BPFCloud NativeDistributed Systems
0 likes · 11 min read
How HUATUO Revolutionizes Cloud‑Native Observability with Zero‑Impact BPF Tracing
Tencent Architect
Tencent Architect
Jul 28, 2025 · Operations

How TencentOS NBS Solves Network Latency Mysteries: Real‑Time Trace Without Disruption

Network latency spikes often leave developers guessing whether the culprit lies in user‑space, the kernel stack, or the physical link; this article introduces TencentOS’s NBS (Net Blackboard System), a low‑overhead, zero‑disruption solution that pinpoints delay sources, supports continuous deployment, and outperforms traditional tools like tcpdump and bpftrace.

NBSNetwork LatencyOperations
0 likes · 14 min read
How TencentOS NBS Solves Network Latency Mysteries: Real‑Time Trace Without Disruption
Linux Code Review Hub
Linux Code Review Hub
Apr 5, 2025 · Operations

Inside Linux Perf: How the Kernel’s Powerful Tracing Tool Works

The article introduces Linux’s built‑in performance analysis tool perf, explains its event‑driven sampling, tracing and profiling capabilities, shows how to install it on various distributions, demonstrates common commands with real code examples, and discusses practical scenarios for locating and optimizing kernel and application performance issues.

BenchmarkingSystem optimizationflamegraph
0 likes · 36 min read
Inside Linux Perf: How the Kernel’s Powerful Tracing Tool Works
Linux Kernel Journey
Linux Kernel Journey
Feb 25, 2025 · Operations

How to Dynamically Trace Kernel Functions with eBPF Using Last Branch Record

Last Branch Record (LBR) is a CPU‑level feature that records branch jumps; the Linux kernel’s bpf_get_branch_snapshot helper (since 5.16) enables eBPF programs to capture LBR data, and the bpflbr tool demonstrates how to trace kernel functions and bpf program execution, disassemble code, and output call stacks.

Last Branch RecordLinuxbpf_get_branch_snapshot
0 likes · 9 min read
How to Dynamically Trace Kernel Functions with eBPF Using Last Branch Record
Linux Kernel Journey
Linux Kernel Journey
Feb 12, 2025 · Cloud Native

Dynamic Filtering of Function Parameters with eBPF

The article explains how to add runtime‑configurable filtering of kernel function arguments in eBPF programs by parsing a C‑style expression, validating its AST, converting it to BPF instructions using BTF metadata, and injecting the generated code into the probe, with a complete example for skb filtering.

BPFBTFGo
0 likes · 15 min read
Dynamic Filtering of Function Parameters with eBPF
Linux Kernel Journey
Linux Kernel Journey
Dec 18, 2024 · Operations

Tracing Linux Soft Interrupts with eBPF: Measuring Processing Time

This article demonstrates how to write an eBPF program that attaches to Linux soft‑interrupt entry and exit points, records timestamps in eBPF maps, computes handling duration, updates counters and histograms, and exposes the data to user space for performance analysis.

LinuxPerformance MonitoringeBPF
0 likes · 5 min read
Tracing Linux Soft Interrupts with eBPF: Measuring Processing Time
Linux Kernel Journey
Linux Kernel Journey
Dec 16, 2024 · Fundamentals

eBPF Talk: Manually Performing Backtrace in arm64 fentry

The article explains why backtracing with eBPF fentry on arm64 is harder than on x86, details the stack layout differences, shows how recent commits changed register saving, and provides a practical detection routine to locate the frame pointer and retrieve the tracee's instruction pointer.

ARM64BPFbacktrace
0 likes · 5 min read
eBPF Talk: Manually Performing Backtrace in arm64 fentry
Linux Kernel Journey
Linux Kernel Journey
Dec 2, 2024 · Operations

Getting Started with rtla timerlat: Cross‑Compilation and Usage Guide

This article introduces rtla timerlat, a Linux scheduling‑latency analysis tool that breaks latency into detailed phases, explains how to cross‑compile its libtracefs and libtraceevent dependencies, compile the tool, enable the kernel timerlat tracer, configure common parameters, and run a typical command with sample output.

Linuxcross-compilationkernel tracing
0 likes · 11 min read
Getting Started with rtla timerlat: Cross‑Compilation and Usage Guide
Linux Kernel Journey
Linux Kernel Journey
Nov 20, 2024 · Operations

eBPF Talk: Who Modified My BPF Map?

This article demonstrates how to use eBPF together with BTF to trace BPF map update and delete functions, shows concrete command‑line output, explains the code that identifies target kernel functions, and details the data‑dumping logic for debugging map contents.

BPF mapBTFDebugging
0 likes · 8 min read
eBPF Talk: Who Modified My BPF Map?
Linux Kernel Journey
Linux Kernel Journey
Sep 7, 2024 · Operations

Building and Running an eBPF Application – Part 1

This article walks through creating a first eBPF program using C and Go on Ubuntu 22.04, covering required dependencies, kernel‑space vs user‑space concepts, event selection, BPF map definition, and a tracepoint function that measures per‑process CPU time.

BPF mapsCGo
0 likes · 11 min read
Building and Running an eBPF Application – Part 1
Didi Tech
Didi Tech
Aug 3, 2023 · Cloud Native

eBPF-Based Cross-Language Non-Intrusive Traffic Recording for Cloud-Native Services

The article describes an eBPF‑based, language‑agnostic traffic recording framework that hooks low‑level socket operations and thread identifiers to capture complete request‑response flows across Java, PHP, and Go services without modifying application code, dramatically lowering implementation and maintenance costs for cloud‑native traffic replay.

Cloud NativeGoObservability
0 likes · 15 min read
eBPF-Based Cross-Language Non-Intrusive Traffic Recording for Cloud-Native Services
Didi Tech
Didi Tech
Jul 4, 2023 · Cloud Native

eBPF Technology and Its Application in Didi's Cloud-Native Observability: HuaTuo Platform Practice

eBPF, a safe, high‑performance Linux kernel extension evolving from the 1993 Berkeley Packet Filter to modern dynamic tracing, underpins Didi’s HuaTuo platform, which consolidates bytecode management, fast data processing, stability self‑healing, and container insight to solve traffic replay, topology, security, and root‑cause analysis challenges across cloud‑native services, with plans to broaden business use and community collaboration.

Container SecurityHuatuoObservability
0 likes · 12 min read
eBPF Technology and Its Application in Didi's Cloud-Native Observability: HuaTuo Platform Practice
OPPO Kernel Craftsman
OPPO Kernel Craftsman
Aug 5, 2022 · Operations

Understanding Linux ftrace Function Graph Tracer on ARM64

The article details how Linux’s function‑graph ftrace tracer works on ARM64, explaining required kernel configs, how -pg inserts _mcount calls, the runtime patching of ftrace_graph_caller, register usage for argument passing, and return handling, and why shadow‑call‑stack must be disabled to enable precise call‑graph and timing analysis.

ARM64Linuxftrace
0 likes · 10 min read
Understanding Linux ftrace Function Graph Tracer on ARM64
Qingyun Technology Community
Qingyun Technology Community
Nov 24, 2021 · Operations

How eBPF Toolchains Simplify Kernel Tracing from BCC to BPFtrace

This article walks through the high‑level components of eBPF programs—backend, loader, frontend, and data structures—showing how the original sock_example.c is split into separate files, how LLVM compiles restricted C to ELF, and how projects like BCC, BPFtrace, and IOVisor automate development, deployment, and cloud‑native observability while highlighting their trade‑offs for embedded environments.

BCCCloud NativeLinux
0 likes · 15 min read
How eBPF Toolchains Simplify Kernel Tracing from BCC to BPFtrace
Alibaba Cloud Developer
Alibaba Cloud Developer
May 21, 2018 · Databases

How TcpRT Enables Real‑Time Service Quality Monitoring for Massive Cloud Databases

TcpRT is a real‑time instrumentation and diagnostic system for Alibaba Cloud RDS that non‑intrusively collects TCP trace data, aggregates billions of records per day, applies statistical and Cauchy‑based anomaly detection, and pinpoints root causes across hosts, proxies, and network devices at massive scale.

Cloud DatabasesSIGMODanomaly detection
0 likes · 27 min read
How TcpRT Enables Real‑Time Service Quality Monitoring for Massive Cloud Databases