A Beginner's Guide to eBPF Programming with Go • Liz Rice • GOTO 2021

This presentation was recorded at GOTOpia February 2021. #GOTOcon #GOTOpia http://gotopia.eu Liz Rice - VP of Open Source Engineering at Aqua Security @lizrice5029 ABSTRACT eBPF has been described as “Superpowers for Linux,” and recently we’ve seen an explosion of tools that use it to power observability, security and more. It's an exciting technology that enables running bespoke programs directly in the kernel. In this talk Liz uses live-coding examples to explore how eBPF programs are loaded and run in the kernel, and how user-space code can communicate with them to extract [...] TIMECODES 00:00 Intro 01:05 What is eBPF? 04:34 Eyplore bpf syscalls in bpftrace 04:39 demo 06:43 eBPF programs & maps 09:56 Attach custom code to an event 10:35 demo 11:39 How to write eBPF hello world? 14:50 eBPF hello world 14:58 demo 24:40 eBPF maps 25:37 demo 31:55 Recreate bpftrace command 32:05 demo 34:48 Outro Download slides and read the full abstract here: https://gotopia.eu/february-2021/sessions/1688/a-beginners-guide-to-ebpf RECOMMENDED BOOKS Liz Rice • Learning eBPF • https://amzn.to/4bIhSbH Liz Rice • Container Security • https://amzn.to/3oU4iJe Liz Rice • Kubernetes Security • https://www.oreilly.com/library/view/kubernetes-security/9781492039075 Calavera & Fontana • Linux Observability with BPF • https://amzn.to/3yV2yUR Brendan Gregg • BPF Performance Tools • https://amzn.to/3B1pxiV Brendan Gregg • Systems Performance • https://amzn.to/3ibg28i Aaron Parecki • OAuth 2.0 Simplified • https://amzn.to/2A3IMOf Aaron Parecki • OAuth 2.0 Servers • https://amzn.to/3ecHEsz Aaron Parecki • The Little Book of OAuth 2.0 RFCs • https://amzn.to/3i7qnlC Erdal Ozkaya • Cybersecurity: The Beginner's Guide • https://amzn.to/2T6OIj3 Richer & Sanso • OAuth 2 in Action • https://amzn.to/3hXiAH6 Wilson & Hingnikar • Demystifying OAuth 2.0, OpenID Connect, and SAML 2.0 • https://amzn.to/2U8iLY2 https://twitter.com/GOTOcon https://www.linkedin.com/company/goto- https://www.instagram.com/goto_con https://www.facebook.com/GOTOConferences #eBPF #BPF #ExtendedBPF #Observability #Linux #GoLang #Kernel #BerkeleyPacketFilters #Demo #eBPFdemo #LizRice CHANNEL MEMBERSHIP BONUS Join this channel to get early access to videos & other perks: https://www.youtube.com/channel/UCs_tLP3AiwYKwdUHpltJPuA/join Looking for a unique learning experience? Attend the next GOTO conference near you! Get your ticket at https://gotopia.tech Sign up for updates and specials at https://gotopia.tech/newsletter SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily. https://www.youtube.com/user/GotoConferences/?sub_confirmation=1