Overview
Explore Datadog's extensive experience with eBPF in production for observability, security, and networking in this 34-minute conference talk from the Linux Plumbers Conference. Delve into the details of gotchas, pitfalls, and bugs encountered over the years, including eBPF hook points coverage issues, common bypasses for eBPF-based security tools, and real-world challenges from Datadog's cloud workload security product. Gain insights into networking challenges with eBPF, such as using LRU maps at scale, problems with shared skb mark values, and interactions between sk_reuseport and bpf_sk_assign. Learn valuable lessons from Datadog's journey to leverage eBPF for building innovative features while navigating complex technical hurdles.
Syllabus
Troubles and Tidbits from Datadogs eBPF journey - Guillaume Fournier, Hemanth Malla
Taught by
Linux Plumbers Conference