Linux Observability with BPF: Advanced Programming for Performance Analysis and Networking

David Calavera

ISBN 10: 1492050202 / ISBN 13: 9781492050209

Published by O'Reilly UK Limited, 2019

About this Item

This item is printed on demand. New copy - Usually dispatched within 5-9 working days 380.

Seller Inventory # C9781492050209

Bibliographic Details

• Title: Linux Observability with BPF: Advanced Programming for Performance Analysis and Networking
• Publisher: O'Reilly UK Limited
• Publication Date: 2019
• Language: English
• ISBN 10: 1492050202
• ISBN 13: 9781492050209
• Binding: Paperback / softback
• Condition: New

About this title

Synopsis

Build your expertise in the BPF virtual machine in the Linux kernel with this practical guide for systems engineers. You’ll not only dive into the BPF program lifecycle but also learn to write applications that observe and modify the kernel’s behavior; inject code to monitor, trace, and securely observe events in the kernel; and more.

Authors David Calavera and Lorenzo Fontana help you harness the power of BPF to make any computing system more observable. Familiarize yourself with the essential concepts you’ll use on a day-to-day basis and augment your knowledge about performance optimization, networking, and security. Then see how it all comes together with code examples in C, Go, and Python.

• Write applications that use BPF to observe and modify the Linux kernel’s behavior on demand
• Inject code to monitor, trace, and observe events in the kernel in a secure way—no need to recompile the kernel or reboot the system
• Explore code examples in C, Go, and Python
• Gain a more thorough understanding of the BPF program lifecycle

About the Authors

David Calavera works as CTO at Netlify. He's served as the maintainer of Docker and contributor to Runc, Go, and BCC tools as well as other open source projects. He's known for his work on the Docker projects, building and fostering the Docker plugin ecosystem. David has a strong fondness for flame graphs and performance optimizations.

Lorenzo Fontana is on the Open Source Team at Sysdig where he primarily works on Falco, a Cloud Native Computing Foundation project that does container runtime security and anomaly detection through a kernel module and eBPF. He's passionate about distributed systems, software-defined networking, the Linux kernel, and performance analysis.