Debug production network drops in minutes with zero agents installed. Use built-in Linux eBPF tools like bpftrace and tcpdrop to trace kernel traffic fast. #eBPF #Linux #DevOps

https://www.valtersit.com/guides/linux/ebpf-network-observability-zero-install-kernel-tools/

Cilium's eBPF conntrack table can fill on high-churn nodes, dropping new connections. Learn to inspect and prune it with cilium bpf ct list. https://www.valtersit.com/vault/inspect-and-prune-cilium-bpf-conntrack-table-on-busy-nodes-6a00f4/ #cilium #conntrack #ebpf

📝 Neuer Blog-Beitrag: Cilium 2026: eBPF-basiertes Networking als neuer Kubernetes-Standard

Cilium hat sich 2026 zum zentralen Netzwerk-Backbone für Kubernetes entwickelt. Google, Microsoft und Amazon setzen auf die eBPF-basierte CNI. Warum Plattformteams jetz…

#Kubernetes #Networking #eBPF

Linux v7.3 is going to include a rework of the #eBPF verifier errors. Most errors will now describe:
- which specific verification rule was violated and why;
- where in the C code the error is happening;
- how the faulty state was reached;
- and how the issue could be fixed.

A practical guide to Tetragon on Kubernetes - observing kernel events, writing TracingPolicies, alerting with Grafana and Loki, then enforcing safely.
#tetragon #ebpf #security #kubernetes #observability
https://stdout.adegoodyer.com/posts/getting-started-with-tetragon/

Zero-code trace-log correlation with #OBI

https://opentelemetry.io...

#Opentelemetry #eBPF

Zero-code trace-log correlation with #OBI

https://opentelemetry.io...

#Opentelemetry #eBPF

Laurin Brandner implemented an HTTP parser using #eBPF! When used to build an in-kernel HTTP cache, it improves throughput by up to 3x at high incoming rates.

Slides: lpc.events/event/20/con...
Stream: youtube.com/live/UQCglEw...
Paper: arxiv.org/pdf/2605.31084
Code: github.com/lerboe/beeper

Litmus tests are small concurrent programs that expose weak memory behaviors. Ali Siddiqui and Xiaoguang Wang show how #eBPF can enforce placement and timing scheduling invariants to improve the effectiveness of litmus tests.

Video: www.youtube.com/watch?v=e1iU...
Paper: dl.acm.org/doi/pdf/10.1...

Cilium Tetragon attaches eBPF to kernel tracepoints/kprobes, blocking process exec, file and network activity at the syscall boundary. TracingPolicy can log or https://www.valtersit.com/vault/ebpf-runtime-enforcement-with-tetragon-for-privilege-escalat-46f458/

#ebpf #zero-trust #ValtersIT

◇ Site Reliability Engineer (SRE) - Early Talent @ Nebius
Amsterdam, Netherlands
Sre in the stack. Put this near the top of the list.

https://o11y.jobs/jobs/site-reliability-engineer-sre-early-talent-nebius-085101?utm_source=bluesky&utm_medium=social&utm_campaign=jobs
#jobs #sre #ebpf #kubernetes

Catch container escapes early: trace sys_enter_unshare, sys_enter_setns, and sys_enter_clone with bpftrace. Log PID, flags, and target ns inode. CLONE_NEWUSER=0x10000000, https://www.valtersit.com/vault/trace-namespace-syscalls-with-bpftrace-to-detect-escape-atte-d52736/ #linux #ebpf #bpftrace

Packet loss at 3am, tcpdump shows SYN with no SYN-ACK, and no agent installed. eBPF tools like bpftrace and tcpdrop ship in the kernel, so you can trace the drop in minutes. Guide: https://www.valtersit.com/guides/linux/ebpf-network-observability-zero-install-kernel-tools/ #eBPF #Linux #Sysadmin

New #eBPF ideas merged upstream sometimes take years before they are discovered, reused, and improved by the research community. I didn't want that for netkit, so I proposed writing a paper about it to Daniel. I'll present it at the eBPF workshop next week!

pchaigno.github.io/ebpf/2026/09...