Re:Show HN: Coroot – eBPF-based, open source observability w...
by bryancoxwell on Tuesday April 08, 2025 @07:49PM
(#43627584)
This is somewhat off topic, but are there any common uses for eBPF outside of observability/monitoring? Or is that kind of its whole thing?
[ Parent
| on HN ]
Re:Show HN: Coroot – eBPF-based, open source observability w...
by benjamin_mahler on Tuesday April 08, 2025 @09:57PM
(#43628235)
Yes, one example: network bandwidth isolation is done more efficiently using ebpf
https://netdevconf.info/0x14/pub/papers/55/0x14-paper55-talk...
Re:Show HN: Coroot – eBPF-based, open source observability w...
by mmckeen on Tuesday April 08, 2025 @10:11PM
(#43628300)
Also commonly used for high-performance networking and security use cases, for example https://isovalent.com/blog/post/cilium-netkit-a-new-containe....
Basically anywhere you'd previously need to write a kernel module but now can have user space run arbitrary kernel code that's secure and won't crash the kernel.
You can also now write custom schedulers in eBPF with sched_ext.