eBPF programs

GPTKB entity

Statements (51)
Predicate Object
gptkbp:instanceOf gptkb:software
gptkbp:accessibleBy gptkb:eBPF_maps
gptkbp:attachedTo gptkb:XDP
gptkb:cgroups
tracepoints
network sockets
kprobes
uprobes
gptkbp:canBe load balancing
observability
packet filtering
metrics collection
profiling
intrusion detection
firewalling
dynamic tracing
system call filtering
gptkbp:canBeInterpreted true
gptkbp:canBeJITCompiled true
gptkbp:canBeLoadedWith gptkb:iproute2
bcc
bpftool
libbpf
gptkbp:developedBy gptkb:Linux_kernel_community
gptkbp:executedBy eBPF virtual machine
gptkbp:hasSecurityModel sandboxed execution
https://www.w3.org/2000/01/rdf-schema#label eBPF programs
gptkbp:introducedIn gptkb:Linux_3.18
gptkbp:limitation no floating point
restricted instruction set
limited stack size
no loops (before Linux 5.3)
gptkbp:prohibits kernel security policies
gptkbp:relatedTo gptkb:Cilium
gptkb:Falco
gptkb:Sysdig
gptkb:XDP
bcc
bpftool
libbpf
BPF Compiler Collection
gptkbp:runsOn gptkb:operating_system
gptkbp:supportedBy major Linux distributions
gptkbp:usedFor network monitoring
performance analysis
security enforcement
kernel tracing
gptkbp:verifiedBy gptkb:eBPF_verifier
gptkbp:writtenBy restricted C
gptkbp:bfsParent gptkb:eBPF
gptkbp:bfsLayer 6