Boundaries in infrastructure are where we can segment and secure. But where we find boundaries has drastically changed. Firewalls lived at the edge, then microsegmentation brought them into the DC, and now with eBPF, we’re watching them move into the workloads

“Whenever we explain Riptides to customers, at conferences or meetups, there’s always one question: Why a kernel module instead of eBPF?” riptides.io/blog-post/wh...

Celebrating 10 years of CNCF! 🎉 We're re-sharing a foundational article that remains critical for high-availability systems by @breakawaybilly.bsky.social. Learn how this core cloud-native principle reduces your blast radius and saves lost revenue. 🔗 thenewstack.io/how-to-treat...

bpftrace language server

IPv6 only Kubernetes is here and helped Energy Sciences Network (ESnet) consolidate 100s of VM deployments into 2 multi-tenant clusters My favorite quote? "The power of Hubble is a godsend. If there’s one tool I use day in and day out, that’s Hubble."

Userspace library to build efficient, unprivileged AF_XDP network applications

Make egress traffic look like ingress allowed Loophole Labs leverage XDP to 12x the throughput of iptables, and all without kernel patches 📈 eBPF is freedom to rethink how the kernel works.

As a former research scientist, I know the impact of putting funding into academic research. This is the second year eBPF Foundation done research grants and I love to see how they push the state of the art in eBPF forward.

The next eBPF product launch, this time for microsegmentation 🐝 would you consider that networking or security?

eBPF Track schedule for Linux Plumbers Conference is out now covering everything from BPF signing to AI flame graphs to embedded eBPF I'll be giving a talk about what the eBPF Foundation has been up to. Ping me if you want to share some sushi there 🇯🇵 lpc.events/event/19/ses...

"Cilium’s largest value was higher service availability and increased security through network policy." Cybozu, Inc. leveraged Cilium to migrate from VMs to Kubernetes and modernize their infrastructure. Here the whole story 👇

A general-purpose protocol stack analysis and debugging tool based on eBPF

The next eBPF observability product launch 🐝 This time in the telco space ☎️ Would anyone launch a new observability solution that isn't based on eBPF today?

eBPF-powered TCP/HTTP proxy agent with built-in ADR—fronts your origins, doesn’t host content

CfP for eBPF Dev Room at FOSDEM is open until December 1st. Ping me if you need help with yours 🐝

You don't fork the browser to add functionality, and you don't patch the kernel to add observability or security. React and eBPF both solved the same fundamental problem of how do you extend a complex system without breaking it?

Beginner-friendly eBPF hands-on tutorial

InfoQ’s 2025 Cloud and DevOps Trends Report just moved eBPF across the chasm from early adopters to the early majority. The next phase won’t be about convincing people why eBPF matters, but helping them figure out how to use it 🐝

Library for address symbolization and related tasks

Talking to founders across the eBPF space, I think one of the most underrated reasons eBPF has won in infrastructure software is deployability. No one ships a custom kernel anymore.

The eBPF Devroom at FOSDEM will return in 2026! 🐝 After a overflowing room in 2025, we'll be back next winter for more buzz! FOSDEM will take place in Brussels, Belgium, on 31 January - 1 February 2026 (fosdem.org). Call for Proposals coming soon ✍

A modern ReactFlow-based canvas for building eBPF programs visually. Drag and drop BPF 🐝

Framework to customize Linux page cache eviction policies using BPF

A modern, Rust-powered Linux scanner that unmasks hidden rootkits, stealthy eBPF tricks, and ghost processes in one fast sweep (45+ scanners)

A top-like tool for monitoring USB traffic using eBPF, inspired by usbtop

Working on the eBPF Foundation, I found two eBPF acquisitions I missed earlier this year both in security 🔐 For vendors, eBPF offers a single, programmable layer for threat detection, observability, and enforcement across workloads. I haven't seen any company going against this strategic shift 🐝

🐝 HTTP packet rate counter w/ eBPF

eBPF Single Packet Authentication with HPKE sender-auth

Real-time TCP CWND monitoring and analysis toolkit using eBPF

When I think about people I follow building in the eBPF ecosystem, Teodor Podobnik and Yusheng Zheng immediately come to mind 🐝 I'm very happy to welcome them as the inaugural eBPF Foundation Fellows!

Manage and chain multiple eBPF programs together, simplifying complex program flows with `bpf_tail_call`

The Earthworm project is designed to monitor the heartbeat signals of Kubernetes clusters using eBPF

eBPF continues to reshape the security landscape. Startups are emerging almost weekly with eBPF at their core, while established vendors are re-architecting entire product lines around it 🐝 Ant Group's case study with the eBPF Foundation is another strong validation ebpf.foundation/ant-group-se...

bpflog is a tiny Go library and example that logs messages from an eBPF program to userspace using a perf ring buffer. github.com/yz4230/bpflog

eBPF support is finally coming to Fargate instances 🐝 This finally brings Cilium, Hubble, and other eBPF-powered tooling within reach for serverless environments. github.com/aws/containe...

Cool to see that my alma mater University of Wisconsin-Madison is using the open source project that I now work on 🐝 Full circle github.com/cilium/ciliu...

Forgot the talk, let's see the code 🐝 This year's eBPF Summit is back as a Hackathon! The last five years of the Summit has been able talks and presentations that are fantastic for sharing knowledge, now its time for you to show off your creativity 🪄

A joke IPX implementation for Linux using eBPF

My transformation into a Linux kernel hacker continues, this time with a talk at Linux Plumbers Conference I'll be talking about the role the eBPF Foundation is playing in the ecosystem, the progress we have made so far, and get feedback on where we should go next lpc.events/event/19/con...

An MCP server and CLI that turns natural-language scheduling intents into concrete scheduling strategies for the Gthulhu scheduler API github.com/Gthulhu/mcp

MCP Server for Linux Scheduler Management and Auto optimization

Performance monitoring agent for eBPF programs github.com/trndcenter/b...

eBPF Foundation has a new website to keep up with the pace of what we are doing: 100k to academic research Launch of inaugural Community & Advocacy Fellowship Program SOWs to improve eBPF selftests and hardware architecture support Sponsoring LPC to bring developers together 6 case studies 🐝

“There are still workloads that run best on VMs. Cilium makes it easy for users to see traffic flows and define network policies between VMs and Kubernetes clusters running in the same environment.” See why Nutanix chose Cilium

Kubernetes networking has gone from “how do we get pods talking?” to “how do we orchestrate distributed AI pipelines across thousands of GPUs with microsecond latency?” And the answer, at least for GKE, is Cilium and eBPF 🐝 cloud.google.com/blog/product...

You have to love the title Creating a Linux “Yogurt-phone” — with netkit and a grain of eBPF because it turns kernel tinkering into a science fair project. Instead of two yogurt cups tied with a string, we have network namespaces and netkit interfaces, tied with eBPF

"eBPF opened a whole new world that wasn't possible before" Hear why Karim chose eBPF for Kerno and why many more companies and starts will too

An example of using Aya (eBPF for Rust) to monitor nanosleep calls in Kubernetes

SIGCOMM hosted the third edition of the eBPF workshop and Paul Chaignon pulled together all the papers and presentations in to one place. From profiling XDP to scheduling BPF programs, lots of interesting research topics this year!

Have you made the switch to Cilium yet? blog.joshdow.ca/homelab-part...