An eBPF overview, part 2: Machine and bytecode


94 points | by mfilion 3 days ago


  • ncmncm 3 days ago

    I want to use eBPF to run packet inspection and capture on my NIC, but the library functions accessible from eBPF don't include access to a nanosecond-resolution clock counter, or to efficient DMA to host procesd memory, needed for the job. Is anybody working on that?

    • qdog 3 days ago

      bpf_ktime_get_ns() returns nanoseconds, is it not adequate?

      I can't really speak to the use of dma and memory, I haven't really looked at that.

      • ncmncm 3 days ago

        Thank you, I don't recall finding this when I studied it last.

    • ngcc_hk 3 days ago

      Not very clear “index” or links. Or no dates of other parts available (and update to link to them).

      But interesting subject.

      • ilovecaching 3 days ago

        The ebpf train is really starting to eat Linux from the inside out, and the use cases appear limitless at the point. Only question now is where will ebpf end.