3 ms·
Neat, but for everyone writing kernel modules: can this be a BPF program? Looking at what LKRG does, it sounds like it can. At my employer, asking us to add a
by brendangregg 7y ago
Neat, but for everyone writing kernel modules: can this be a BPF program?
Looking at what LKRG does, it sounds like it can.
At my employer, asking us to add a kernel module to our BaseAMI (since this needs to run on every instance) is a very hard sell. Asking us to add a BPF program, which comes with security by design, is much much easier. Or put it this way: we add zero kernel modules to our BaseAMI, but last I counted we were at 15 BPF programs (and Facebook has over 40.)
- pmccarren 7y agoWasn't familiar with BPF programs until I saw your comment, and subsequently went on a search trail. Really like what I've read. BPF and XDP provide so much utility! I thought Jessie had a good overview[0] of BPF [0] https://blog.jessfraz.com/post/linux-observability-with-bpf/ https://blog.jessfraz.com/post/linux-observability-with-bpf/
- pstuart 7y agoBrendan Gregg literally wrote the book on BPF: http://www.brendangregg.com/bpf-performance-tools-book.html http://www.brendangregg.com/bpf-performance-tools-book.html He is an engineering god.
- pjmlp 7y agoAndroid also uses BPF for a couple of features. https://source.android.com/devices/architecture/kernel/bpf https://source.android.com/devices/architecture/kernel/bpf