Modern applications require comprehensive observability and performance insights. However, traditional monitoring approaches often introduce significant overhead or provide limited visibility into system internals. This is where eBPF (Extended Berkeley Packet Filter), a powerful Linux kernel technology, comes into play. It allows developers to trace system behavior, monitor live processes, and debug complex issues in real time, all without modifying application code or creating logging bottlenecks.
In this session will delve into the inner workings of eBPF, explaining how it executes sandboxed programs within the Linux kernel. We’ll explore how this provides unprecedented access to low-level system events while maintaining minimal performance impact. Through practical demonstrations using a Minikube environment, we will compare eBPF-powered load balancers with traditional ones, highlighting the differences in throughput, latency, and packet visibility.
Key topics that will be covered include:
An overview of tools such as bpftrace, bcc, and libbpf, which simplify the development and use of eBPF programs.
Illustrative real-world scenarios where eBPF significantly improves observability, performance tuning, and security.
This session is tailored for DevOps engineers, Site Reliability Engineers (SREs), backend developers, and platform architects eager to elevate their understanding of production system behavior and to adopt state-of-the-art observability techniques that minimize overhead while maximizing insight.
Join us at Sahaj Software Chennai’s DevDay to explore how eBPF can revolutionize your approach to monitoring, debugging, and securing Linux-based systems—empowering you to build more resilient, performant, and transparent applications.
