Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security (Paperback)

What is eBPF? With this revolutionary technology, you can write custom code that dynamically changes the way the kernel behaves. It's an extraordinary platform for building a whole new generation of security, observability, and networking tools.

This practical book is ideal for developers, system administrators, operators, and students who are curious about eBPF and want to know how it works. Author Liz Rice, chief open source officer with cloud native networking and security specialists Isovalent, also provides a foundation for those who want to explore writing eBPF programs themselves.

With this book, you will:

• Learn why eBPF has become so important in the past couple of years
• Write basic eBPF code, and manipulate eBPF programs and attach them to events
• Explore how eBPF components interact with Linux to dynamically change the operating system's behavior
• Learn how tools based on eBPF can instrument applications without changes to the apps or their configuration
• Discover how this technology enables new tools for observability, security, and networking

什麼是eBPF？這項革命性的技術讓您能夠撰寫自訂程式碼，動態改變核心的行為方式。它是建立全新一代安全性、可觀察性和網路工具的非凡平台。

這本實用的書籍非常適合開發人員、系統管理員、運維人員和對eBPF感到好奇並想了解其運作方式的學生。作者Liz Rice是Isovalent的首席開源官員，該公司專注於雲原生網路和安全性。她還為那些想要自行撰寫eBPF程式的人提供了基礎知識。

透過這本書，您將能夠：

- 了解為何在過去幾年中eBPF變得如此重要
- 撰寫基本的eBPF程式碼，並操作eBPF程式並將其附加到事件上
- 探索eBPF元件如何與Linux互動，動態改變作業系統的行為
- 學習基於eBPF的工具如何在不更改應用程式或其配置的情況下儀器化應用程式
- 發現這項技術如何為可觀察性、安全性和網路提供新的工具