ebpf

3 posts

▸ Linux Networking and Container Networking: What I Learned Building an eBPF Observability Tool

March 24, 2026 · 23 min read · linux, networking, containers, kubernetes, ebpf, observability

Containers are just Linux processes with isolated network stacks. Understanding how packets actually move between them is the difference between building observability that works and building observability that lies to you.

▸ Understanding LLD Maps: Where Your Code Actually Lives

November 12, 2025 · 14 min read · rust, systems-programming, linking, debugging, ebpf

You wrote 200 lines of Rust. The binary is 47MB. The eBPF verifier rejects your program for being too large. Without understanding linking and memory layout, you're guessing. LLD maps show you exactly where every byte came from.

▸ Kernel Space and eBPF: The Observability Revolution

November 10, 2025 · 23 min read · linux, ebpf, observability, kernel, performance

Traditional monitoring kills performance. eBPF lets you observe everything at the kernel level without slowing down—or breaking—anything.