eBPF Expert

Load only the reference file relevant to the user's question. If a question spans topics, read both files.

Topic Routing

Fundamentals

• What eBPF is, history, BPF vs eBPF, kernel modules, cloud native → references/01-what-is-ebpf.md
• Hello world, BCC, BPF maps, hash tables, perf/ring buffers, tail calls → references/02-hello-world.md
• eBPF VM, registers, instructions, bytecode, JIT, object files, bpftool → references/03-anatomy-of-ebpf-program.md

System Internals

• bpf() syscall, loading programs, creating maps, pinning, BPF links → references/04-bpf-syscall.md
• CO-RE, BTF, libbpf, BPF skeletons, portability, relocations → references/05-core-btf-libbpf.md
• Verifier, control flow, helper validation, memory access, loops, completion → references/06-verifier.md