Linux Observability with Bpf: Advanced Programming for Performance Analysis and Networking

Calavera, David, Fontana, Lorenzo



Want to master the BPF virtual machine in the Linux Kernel? This practical guide shows you how to write applications that use BPF to observe and modify the kernel's behavior on demand--without having prior knowledge of Linux Kernel development. David Calavera and Lorenzo Fontana introduce concepts to help systems engineers understand the BPF program lifecycle.

If you have knowledge about performance optimization, networking, and security, this book shows you how to inject code to monitor, trace, and observe events in the kernel in a secure way--without the need to recompile the kernel or reboot the system. You'll find code examples in C, Go, and Python.


David Calavera works as CTO at Netlify. He's served as maintainer of Docker, contributor to Runc, Go, BCC tools as well as other open source projects. He's known for his work on the Docker projects, building and fostering the Docker plugins ecosystem. David has a strong fondness for Flame Graphs and performance optimizations.