eBPF extended Berkeley Packet Filter

The IO Visor community has created many excellent sources of information and samples on eBPF from beginner to advanced levels.

Documents:

IO Visor Github contains many documents uploaded by developers here:

• BPF documents on IO Visor Github

In addition, many resources are available at the following sites:

A description of Linux socket filtering function with BPF in kernel.org:

• Introduction to Linux Socket Filtering aka BPF

A presentation by Alexei Starovoitov of Facebook:

• BPF – In-Kernel Virtual Machine

An introduction to IO Visor, BPF and BCC by Brenden Blanco of PLUMgrid:

• IO Visor @SCALE14x
• What can BPF do for you

A presentation by Brendan Gregg of Netflix on using eBPF to solve Linux performance issues:

• Linux 4.x Performance Using BPF Superpowers

A presentation by Thomas Graf of Cisco:

• Next Generation of Programmable Datapath

Presentations, video by Daniel Borkman of Cisco:

• Advanced programmability and recent updates with tc’s cls_bpf
• Linux tc and eBPF

Presentations on eBPF and tracing by Sasha Goldshtein of Sela Group:

• Staring into the eBPF Abyss
• The Next Linux Superpower: eBPF Primer

An introduction to Linux kernel tracing and eBPF integration by Viller Hsiao:

• Meet cute-between eBPF and Kernel Tracing 

A presentation by Gary Lin of SUSE Labs on eBPF overview and its use in tracing:

• eBPF Trace from Kernel to User Space

A paper published on Sigcomm by Z. Ahmed, M. Alizai, and A. Syed:

• InKeV: In-Kernel Distributed Network Virtualization for DCN

An overview to IO Visor and eBPF by Affan Syed of PLUMgrid:

• eBPF and IO Visor: The What, How, and What’s Next

A presentation of eBPF on the mainframe by Michael Holzheu of IBM:

• eBPF on the Mainframe: Packet Filtering and More

Samples:

Samples can be found on IO Visor Github and also at the below links:

• BPF helpers, tracing, and XDP samples on Torvalds/Linux 

Man Pages:

• Linux Programmer’s Manual on BPF
• BPF Classifier and Actions in tc(8)