A deep dive into writing eBPF programs at the raw bytecode level without libbpf, LLVM, or GCC, using Zig as the host language. Covers the full workflow: loading programs via the bpf() syscall, using eBPF maps for kernel-userspace data sharing, writing socket filter and sk_skb programs, and constructing BTF (BPF Type Format)

20m read time From feyor.sh
Post cover image
Table of contents
eBPF Hello WorldPassing data between kernel and user spaceType information (BTF)

Sort: