Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Neat, but for everyone writing kernel modules: can this be a BPF program?

Looking at what LKRG does, it sounds like it can.

At my employer, asking us to add a kernel module to our BaseAMI (since this needs to run on every instance) is a very hard sell. Asking us to add a BPF program, which comes with security by design, is much much easier. Or put it this way: we add zero kernel modules to our BaseAMI, but last I counted we were at 15 BPF programs (and Facebook has over 40.)



Wasn't familiar with BPF programs until I saw your comment, and subsequently went on a search trail. Really like what I've read. BPF and XDP provide so much utility!

I thought Jessie had a good overview[0] of BPF

[0] https://blog.jessfraz.com/post/linux-observability-with-bpf/


Brendan Gregg literally wrote the book on BPF: http://www.brendangregg.com/bpf-performance-tools-book.html

He is an engineering god.


Android also uses BPF for a couple of features.

https://source.android.com/devices/architecture/kernel/bpf




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: