4–7 Nov 2019
Please log in

eBPF-powered distributed Kubernetes performance analysis

Lorenzo Fontana (Sysdig)
13:2514:05 Wednesday, 6 November 2019
Location: Hall A6
Average rating: *****
(5.00, 2 ratings)

Who is this presentation for?

  • SREs and software engineers




Since the Linux kernel 4.x series, a lot of enhancements have reached the mainline of the eBPF ecosystem, giving you the capability to do a lot more than just network stuff. But the eBPF ecosystem can be hard to wrap your mind around.

Lorenzo Fontana offers an initial understanding of what eBPF programs are and explains how to hook them to programs running inside Kubernetes clusters in order to answer targeted questions at the cluster level about very specific, fine-grained situations: Has that function in my program been called? For a given function, which arguments have been passed to it? What it did return? Which TCP packets are being retransmitted? Which queries are running slow? What are the insights on programming language events/GC? Has that file been opened?

Imagine a programmable Kubernetes performance analysis tool that runs at cluster-level without performance implications. How would that look to you?

Prerequisite knowledge

  • A basic understanding of how the Unix operating systems work and Kubernetes

What you'll learn

  • Discover what eBPF is, how to leverage eBPF programs to instrument and extract data from the kernel, and how to use eBPF programs with Kubernetes
  • Hear eBPF use cases and ideas for how you can use it yourself
Photo of Lorenzo Fontana

Lorenzo Fontana


Lorenzo Fontana is an open source software engineer at Sysdig, where he primarily works on Falco, a Cloud Native Computing Foundation (CNCF) project that does container runtime security and anomaly detection. He’s passionate about distributed systems, software-defined networking, the Linux kernel, and performance analysis. He’s the maintainer of the IO Visors Project’s kubectl-trace.

  • Oracle Cloud Infrastructure
  • Cloudflare
  • JFrog
  • Akamas
  • Aqua Security Software
  • Fastly
  • Google
  • Instana
  • JetBrains
  • LaunchDarkly
  • LightStep
  • OVHcloud
  • SignalFx
  • VictorOps
  • Wayfair
  • Blameless
  • Chronosphere
  • FusionReactor
  • humanitec
  • replex GmbH
  • StackState
  • Datadog
  • GitLab
  • Gremlin
  • StormForger
  • SysEleven GmgH
  • Vamp.io

Contact us


For conference registration information and customer service


For more information on community discounts and trade opportunities with O’Reilly conferences


For information on exhibiting or sponsoring a conference


For media/analyst press inquires