We will present new features and trends that emerged in the recent years in the (e)BPF world. These include: - BPF kernel functions, a.k.a. kfuncs (your BPF programs can call many new functions), - BPF memory allocator (malloc in BPF became much safer), - long-lived kernel pointers (you can store pointers in BPF maps), - multi-kprobe attachment (attaching to thousands of kernel functions is much faster), - ...and more. Come to see how these new concepts work and how you can make use them in your BPF programs!
I'm a software engineer at Red Hat, mostly working on BPF tracing. At the same time, I'm a PhD student at Brno University of Technology, doing research in formal verification and static analysis of software.
