Engineering Everything with eBPF

"Engineering Everything with eBPF" is your hands-on guide to safely tapping into the Linux kernel using eBPF—no kernel hacking required.What’s Inside:Step-by-step approach: Start small with a 5-line “hello, kernel” and grow into full tools for tracing, networking, and security.Core eBPF fundamentals: Deep dive into bytecode, maps, hooks, tail calls, BPF Type Format (BTF), and how verification and JIT compilation work.Real-world examples: Each chapter is packed with tested code targeting kernel 6.12+, covering XDP, traffic control, kprobes, uprobes, LSM/Landlock sandboxing, and more.Build production tools: Learn how to develop safe, efficient programs for observability, packet filtering, tracing systems, or sandboxing.Who Should Read It:Developer-operators, system programmers, DevOps/SRE teams, and security professionals seeking:Practical eBPF skills over theoryReal code that runs today on modern LinuxHands-on learning through examples and clear explanationsWhy It Matters:eBPF is revolutionizing Linux by allowing dynamic, kernel-level programmability with safety and performance. As more infrastructure becomes eBPF-driven from cloud networking to security, this book gives you both the how and the why. Read more