» Tag
ebpf
22 postsLinux kernel edges toward $ORIGIN support via eBPF
How a Nix community effort led to a Linux kernel patch adding programmable $ORIGIN support via eBPF and binfmt_misc, without breaking process identity.
Netflix Explains Service Topology: A Real-Time Map for Thousands of Microservices
Netflix details Service Topology, a real-time dependency map spanning thousands of microservices. Learn how eBPF, application-layer, and trace data combine for fast incident response.
64 BFD sessions at 10ms saturate FRR bfdd's core; XDP handles it at 0 flaps
FRR's bfdd saturates one core at 64 BFD sessions while an XDP fast path carries the same load at 751ns/packet with zero flaps; three FRR bugs merged upstream.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comFurtex: Linux Post-Exploitation and Evasion Research Toolkit
Furtex is a Linux post-exploitation and evasion research toolkit based on io_uring and eBPF, designed for authorized research.
XDP BFD Integrates with Stock FRR, Eliminates Flaps Under Stress
XDP-based BFD now integrates with stock FRR bfdd, cutting flaps to zero under stress and uncovering upstream FRR and kernel bugs along the way.
bfdd vs XDP-based BFD Fast Path Under CPU Stress: 44 vs 0 Flaps
Under CPU stress, FRR's bfdd flapped 44 times in 120 seconds while an XDP-based BFD fast path stayed at zero flaps, matching line-card-level reliability.
Sip-exporter: eBPF-Based SIP/RTP Monitoring for Prometheus
Sip-exporter uses eBPF to capture SIP/RTP traffic in-kernel and export voice quality, fraud detection, and RFC 6076 metrics to Prometheus.
Kernel-Level Enforcement for AI Agents via eBPF-LSM and Z3
Solo-built eBPF-LSM prototype enforces AI agent guardrails at the kernel syscall boundary with Z3 SMT checks; open break-it challenge on GitHub.
Sigwire: a live TUI for tracing every Linux signal
Sigwire is an open-source TUI that uses Linux kernel tracepoints to show every signal on a machine live, without strace or ptrace.
PFL Reimagines OpenBSD's pf Firewall as a Linux eBPF/XDP Dataplane
pfSense's creator built PFL, porting OpenBSD's pf firewall language onto Linux XDP. Here's how stateful filtering and NAT survive the eBPF verifier's strict constraints.