Linux Observability with BPF

Book Description

Build your expertise in the BPF virtual machine in the Linux kernel with this practical guide for systems engineers. You’ll not only dive into the BPF program lifecycle but also learn to write applications that observe and modify the kernel’s behavior; inject code to monitor, trace, and securely observe events in the kernel; and more.

Authors David Calavera and Lorenzo Fontana help you harness the power of BPF to make any computing system more observable. Familiarize yourself with the essential concepts you’ll use on a day-to-day basis and augment your knowledge about performance optimization, networking, and security. Then see how it all comes together with code examples in C, Go, and Python.

• Write applications that use BPF to observe and modify the Linux kernel’s behavior on demand
• Inject code to monitor, trace, and observe events in the kernel in a secure way—no need to recompile the kernel or reboot the system
• Explore code examples in C, Go, and Python
• Gain a more thorough understanding of the BPF program lifecycle

中文：

书名：带BPF的Linux可观测性

通过这本面向系统工程师的实用指南，积累您在Linux内核中的BPF虚拟机方面的专业知识。您不仅将深入了解BPF程序的生命周期，还将学习如何编写观察和修改内核行为的应用程序；注入代码以监视、跟踪和安全地观察内核中的事件；等等。

作者David Calvera和Lorenzo Fontana帮助您利用BPF的力量，使任何计算系统更容易观察到。熟悉您将在日常工作中使用的基本概念，并增强有关性能优化、网络和安全性的知识。然后看看C、Go和Python中的代码示例是如何结合在一起的。

• 编写使用BPF按需观察和修改Linux内核行为的应用程序
• 注入代码，以安全的方式监视、跟踪和观察内核中的事件–无需重新编译内核或重新启动系统
• 探索使用C、Go和Python编写的代码示例
• 更深入地了解BPF计划的生命周期