Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/vmyroslav/ebpf-cilium-demo
This repository contains demos showcasing the usage of eBPF with Cilium in Go applications
https://github.com/vmyroslav/ebpf-cilium-demo
cilium-ebpf ebpf go
Last synced: 24 days ago
JSON representation
This repository contains demos showcasing the usage of eBPF with Cilium in Go applications
- Host: GitHub
- URL: https://github.com/vmyroslav/ebpf-cilium-demo
- Owner: vmyroslav
- License: mit
- Created: 2024-06-29T20:21:23.000Z (4 months ago)
- Default Branch: main
- Last Pushed: 2024-07-02T15:16:52.000Z (4 months ago)
- Last Synced: 2024-09-30T04:05:56.636Z (about 1 month ago)
- Topics: cilium-ebpf, ebpf, go
- Language: C
- Homepage:
- Size: 673 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Cilium eBPF Demos
This repository contains multiple demos showcasing the usage of eBPF with Cilium for Go applications. Each demo is designed to highlight different aspects of eBPF and its interaction with Go applications, including uProbes, uRetprobes, and function execution time tracking.
## Overview
Each folder within this repository contains a specific demo illustrating a unique feature of eBPF and its integration with Go applications. The demos include:
1. [Overview](#overview)
2. [Prerequisites](#prerequisites)
3. [How Kernel Space and User Space Interacts in this examples](#how-kernel-space-and-user-space-interacts-in-this-examples)
4. [Useful Resources](#useful-resources)
For more details on each demo, please refer to the README file within the respective demo folder.
## Prerequisites
To run these demos, you need a Linux system with the following tools and packages installed:
- **Linux Kernel**: Version 4.15 or higher with BPF enabled.
- **bcc tools**: BPF Compiler Collection tools.
- **clang and llvm**: Required for compiling eBPF programs.
- **Go**: Version 1.22 or higher.
## How Kernel Space and User Space Interacts in this examples
```mermaid
graph TD
subgraph User Space
A[Go Application]
B[Tracing Application]
end
subgraph System Call Interface
C[System Calls]
end
subgraph Kernel Space
D[eBPF Program]
E[uprobe - Store Start Time in Hash Map]
F[Hash Map - Start Times]
G[Ring Buffer - Events]
end
A -->|Makes HTTP Request| A2[Go demo Function]
B -->|Setup uprobe using System Calls| C
C -->|Load eBPF Program and Setup Probes| D
D --> E
E -->|Store Start Time in Hash Map| F
E -->|Store Result in Ring Buffer| G
G --> I[Tracing Application Reads Data from Ring Buffer]
B -->|Read Data from Ring Buffer| I
```
## Useful Resources
Here are some useful resources to understand eBPF, Go, and their integration:
- [Great Medium Article on BPF and Go](https://medium.com/bumble-tech/bpf-and-go-modern-forms-of-introspection-in-linux-6b9802682223)
- [Liz Rice's Talk on eBPF](https://www.youtube.com/watch?v=Hed2DOrk_kk)
- [Pixie Demo on eBPF](https://github.com/pixie-io/pixie-demos/tree/main/simple-gotracing)
- [Cilium eBPF Documentation](https://ebpf-go.dev)
- [Series of good blog posts](https://intelops.ai/learning-center/2-learn-ebpf/)
- [List of BPF helper functions](https://ebpf-docs.dylanreimerink.nl/linux/helper-function/)
- [Go opentelemetery instrumentation](https://github.com/open-telemetry/opentelemetry-go-instrumentation)
## License
This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.