tgross/ebpf-workshop-dodphilly2019

Workshop on eBPF for DevOpsDays Philly 2019

eBPF Workshop

A workshop given at DevOpsDays Philadelphia 2019

Running Yourself

This workshop has been designed around a deployment on AWS. Within a few weeks after the workshop, I hope to have a Vagrantfile in this repo which gets as close as possible to the working environment we had.

To run the slides, use my fork of Josh Clulow's vtmc, found at https://github.com/tgross/vtmc

Credits and Reference Material

If you've taken this workshop and want to dig into more, check out the following links.

Huge thanks!

David Calavera and Lorenzo Fontana's have a workshop at workshop.bpf.sh to support their book Linux Observability with BPF: Advanced Programming for Performance Analysis and Networking. Their workshop is GPL and available at https://github.com/bpftools/bpf-workshop. Although this DevOpsDays workshop has a slightly different take on the content, David and Lorenzo's workshop was definitely the starting point.

Blog posts

• Tracing a packet journey using Linux tracepoints, perf and eBPF by Jean-Tiare Le Bigot

• How to turn any syscall into an event: Introducing eBPF Kernel probes by Jean-Tiare Le Bigot

• The art of writing eBPF programs: a primer. by Gianluca Borello at Sysdig.

• Load XDP programs using the ip (iproute2) command by Lorenzo Fontana

• Why is the kernel community replacing iptables with BPF? by Thomas Graf of Cilium

• Instrumenting CPython with DTrace and SystemTap by David Malcolm and Łukasz Langa

• Custom port-based BPF firewall loader for systemd services by Kai Lüke

• Dive into BPF: a list of reading material by Quentin Monnet

• Network security for microservices with eBPF by Beatriz Martínez Rubio

• eBPF and XDP for Processing Packets at Bare-metal Speed by Nedim Šabić of Sematext

Talks and Whitepapers

• XDP in practice: integrating XDP into our DDoS mitigation pipeline by Gilberto Bertin of Cloudflare

• USDT Tracing report by Dale Hamel

• BPF in LLVM and the Kernel by Alexei Starovoitov

Documentation:

• Cilium docs <-- these are amazing

• bcc tutorial docs

• bpftrace reference guide

Saved my bacon during prep for this workshop:

• Cilium docs <-- did I mention these are amazing?

• eBPF Basics by Raymond Burkholder

Books:

• BPF Performance Tools (book) by Brendan Gregg

Interesting repos:

• Awesome eBPF: A curated list of awesome projects related to eBPF.

• https://github.com/kinvolk/bpf-exercises

• https://github.com/xdp-project/xdp-tutorial

• https://github.com/p-/socket-connect-bpf