重要网站
- https://ebpf.io/
- 深入浅出 eBPF
- eBPF学习教程
- ARTHURCHIAO'S BLOG
- https://www.bolipi.com/ebpf/index
- https://github.com/iovisor
- https://github.com/libbpf
- https://github.com/cilium/
编程
ebpf-libraries
libbpf-bootstrap
- https://github.com/libbpf/libbpf-bootstrap
- 一文搞懂如何从头开发一个Hello World级eBPF程序
- 使用libbpf-bootstrap构建第一个libbpf+BPF CO-RE程序
- libbpf-bootstrap Makefile阅读
- BPF编程-使用libbpf-bootstrap构建BPF应用程序【译】
- Building BPF applications with libbpf-bootstrap
libbpf
BCC
bpftrace
技术专题
入门
- What is eBPF?
- eBPF 工作原理浅析
- eBPF 概述
- eBPF 技术简介
- Linux超能力BPF技术介绍及学习分享
- linux-bpf-learning
- BPF Documentation
- Cilium:BPF 和 XDP 参考指南(2021)
- BPF and XDP Reference Guide
- Cilium:BPF和XDP参考指南
- 高效入门eBPF
- Linux Tracing System浅析 & eBPF开发经验分享
- Linux 核心設計: 透過 eBPF 觀察作業系統行為
- 内核之旅文档
- Lifetime of BPF objects
- 深入理解 Linux eBPF:一个完整阅读清单(转载)
指令集
bpf-helpers
CO-RE
- BPF 可移植性和 CO-RE(一次编译,到处运行)
- BPF CO-RE reference guide
- BPF的可移植性和CO-RE (Compile Once – Run Everywhere)
- BPF CO-RE (Compile Once – Run Everywhere)
- BPF Type Format (BTF)
- btfgen-internals
- BTF deduplication and Linux kernel BTF
pahole
- pahole安装及使用
- https://github.com/aquasecurity/btfhub/blob/main/docs/how-to-use-pahole.md
- pahole(1) - Linux man page
- https://wiki.bwhpc.de/e/Pahole
- https://git.kernel.org/pub/scm/devel/pahole/pahole.git
- https://git.kernel.org/pub/scm/devel/pahole/pahole.git/tree/README.btf
- https://github.com/acmel/dwarves
Tail Call
MAP
bpftool
- 上手 bpftool
- eBPF中bpftool的常见用法
- Features of bpftool: the thread of tips and examples to work with eBPF objects
调试
- BPF drgn tools
- BPF 进阶笔记(四):调试 BPF 程序
- BPF tips & tricks: the guide to bpf_trace_printk() and bpf_printk()