3 ms·
When you have DTrace, eBPF isn't as urgent.
by cryptonector 4y ago
When you have DTrace, eBPF isn't as urgent.
- ggm 4y agoYou've seen what nlnet labs are doing with XDP managing and monitoring dns flows in kernel? Wire speed packet classification. Cool stuff. But.. it demands modern ebpf.
- rurban 4y agoSecurity is more important. And dTrace implements a full stack, from kernel, user space to apps. eBPF is an Linux-only insecure island, they can keep.
- cryptonector 4y agoEh, a bytecode like DTrace's, or eBPF, can be safe. The original BPF certainly was (IIRC).
- rurban 4y agoNot if you allow user arrays in the kernel. dTrace doesn't, even when they didn't know about Spectre beforehand.