3 ms·

If a kernel module crashes, you panic the kernel (normally). eBPF probes can't crash and are determanistically safe (they aren't actually Turing complete). So

If a kernel module crashes, you panic the kernel (normally). eBPF probes can't crash and are determanistically safe (they aren't actually Turing complete). So you are unlikely to heavily impact application performance.

dangisafascist 9y ago
If you write your kernel module in eBPF (by pre-compiling to native code) it can't crash either.