3 个仓库
The authoring and development of programs designed for the eBPF runtime.
Distinct from Kernel Observability Programs: Focuses on the development experience and environment rather than just the observability outcome.
Explore 3 awesome GitHub repositories matching operating systems & systems programming · eBPF Program Development. Refine with filters or upvote what's useful.
Aya is a Rust-native framework for writing, compiling, and loading eBPF programs into the Linux kernel. It provides a complete development environment that eliminates the need for a C toolchain or libbpf, allowing developers to work entirely within the Rust ecosystem. The framework manages the full lifecycle of eBPF programs, including async runtime integration, CO-RE BTF resolution for kernel version portability, ELF-based program loading, and safe kernel memory access. The framework distinguishes itself through its pure Rust compilation pipeline, which compiles Rust source code directly int
Provides a Rust-native API for writing XDP programs that process incoming network packets.
该项目是一个教育资源,提供了一个全面的开发教程,用于在 Linux 内核中使用 C、Go 和 Rust 编写并加载 eBPF 程序。它作为一个技术指南,用于开发直接在内核中执行的自定义逻辑。 这些材料涵盖了专门的领域,包括内核可观测性和追踪、用于入侵检测的安全实现,以及用于包过滤和负载均衡的高性能网络工程。它还包括用于 Linux 内核追踪以及使用 kprobes、uprobes 和 tracepoints 的专用手册。 该项目涵盖了广泛的功能领域,如内核插桩、系统监控和可观测性、网络分析以及安全强制执行。它进一步扩展到 GPU 和驱动程序的硬件级调试,以及底层系统操作和资源管理。
Provides a comprehensive tutorial on writing and loading eBPF programs using C, Go, and Rust.
Inspektor Gadget is an eBPF observability toolset and program framework designed for tracing Linux systems and debugging Kubernetes nodes. It provides a suite of tools to collect kernel-level telemetry and export system metrics via the OpenTelemetry standard. The project distinguishes itself by packaging inspection tools as OCI-compliant container images, allowing for standardized distribution and deployment across clusters and hosts. It employs a modular data processing pipeline that utilizes WebAssembly modules to transform and filter telemetry, and leverages Compile Once Run Everywhere for
Provides a framework for creating and packaging system inspection tools as eBPF programs.