In-Kernel Low Latency Tracing and Networking

Using tools from the IO Visor Project, learn how to run JIT compiled C programs inside your kernel using the eBPF "in-kernel virtual machine". Combined with kprobes or tc filters, it can work to discover disk latency bottlenecks in your application or analyze your container networking performance, and many things in between! Explore how to bend this kernel swiss army knife to your will.

Attendees will learn about:

• kprobes and uprobes, a key tracing functionality
• how BCC converts C programs into BPF bytecode using LLVM
• interesting use cases for kernel introspection tools written using BCC
• how to monitor and influence network traffic using BPF programs and tc filters