Build Systems that Drive Business
30–31 Oct 2018: Training
31 Oct–2 Nov 2018: Tutorials & Conference
London, UK

Container observability with eBPF

Jorge Salamero (Sysdig)
16:3517:15 Thursday, 1 November 2018
Microservices and Containers
Location: King's Suite - Sandringham
Average rating: ***..
(3.50, 4 ratings)

Prerequisite knowledge

  • Familiarity with container monitoring, Prometheus, exporters, and Linux system calls

What you'll learn

  • Learn how to use eBPF to leverage system calls


Looking at what’s happening inside a container and inside a process can be hard. Jorge Salamero explains how to use eBPF to leverage system calls, allowing you to know everything, from performance to (mis)behavior, errors and more at all levels (network, filesystem, process, etc.). Jorge explores the challenges of practical observability, from tracing and custom metrics with Prometheus to agent- and check-based metric collection down to the kernel for eBPF system analysis. He then compares state-of-the-art eBPF open source tools and their use cases.

Photo of Jorge Salamero

Jorge Salamero


Jorge Salamero is a technical marketing manager at Sysdig. Jorge enjoys monitoring all the things, from his Docker containers and Kubernetes clusters to writing sensors plugins and DIY IoT projects with Raspberry Pi and ESP8266. Previously, he was one of the promoters of HumanOps and a Debian developer. When he’s away from his computer, you can find him walking with his two dogs in the mountains or driving his car on a twisted road.