Updated: eBPF Monitoring vs Sidecars: How Datadog Uses eBPF
Sidecar proxies had a good run, but eBPF is eating the…
#ebpf #observability
https://www.kunalganglani.com/blog/ebpf-monitoring-replacing-sidecars?utm_source=bluesky&utm_medium=update&utm_campaign=ebpf-monitoring-replacing-sidecars
Sidecar proxies had a good run, but eBPF is eating the…
#ebpf #observability
https://www.kunalganglani.com/blog/ebpf-monitoring-replacing-sidecars?utm_source=bluesky&utm_medium=update&utm_campaign=ebpf-monitoring-replacing-sidecars
eBPF Monitoring vs Sidecars: How Datadog Uses eBPF
Sidecar proxies had a good run, but eBPF is eating the service mesh from the kernel up. Here's how Datadog's bet on kernel-level observability is reshaping cloud-native monitoring.
www.kunalganglani.com
November 6, 2026 at 8:38 PM
Updated: eBPF Monitoring vs Sidecars: How Datadog Uses eBPF
Sidecar proxies had a good run, but eBPF is eating the…
#ebpf #observability
https://www.kunalganglani.com/blog/ebpf-monitoring-replacing-sidecars?utm_source=bluesky&utm_medium=update&utm_campaign=ebpf-monitoring-replacing-sidecars
Sidecar proxies had a good run, but eBPF is eating the…
#ebpf #observability
https://www.kunalganglani.com/blog/ebpf-monitoring-replacing-sidecars?utm_source=bluesky&utm_medium=update&utm_campaign=ebpf-monitoring-replacing-sidecars
secimport — Library-Level eBPF Sandbox for Python (Linux & macOS): syscall-level control per module. https://ktp.sh/2cSn3od3qu
November 6, 2026 at 6:59 AM
secimport — Library-Level eBPF Sandbox for Python (Linux & macOS): syscall-level control per module. https://ktp.sh/2cSn3od3qu
k3sec 1.8.0 🛡️
• Règles de détection CEL, rechargées à chaud
• Audit log de l’API server k8s
• eBPF : 0 événement perdu en burst, moitié moins de CPU, bruit de l’hôte filtré
• Connexions et DNS dédupliqués
http://
github.com/mlab-sh/k3sec
• Règles de détection CEL, rechargées à chaud
• Audit log de l’API server k8s
• eBPF : 0 événement perdu en burst, moitié moins de CPU, bruit de l’hôte filtré
• Connexions et DNS dédupliqués
http://
github.com/mlab-sh/k3sec
GitHub - mlab-sh/k3sec: Runtime security for Kubernetes in one Rust binary: k8s events, pod logs, eBPF and YARA detections, and CVEs ranked by code actually loaded in memory. Built for k3s, Thalos and...
Runtime security for Kubernetes in one Rust binary: k8s events, pod logs, eBPF and YARA detections, and CVEs ranked by code actually loaded in memory. Built for k3s, Thalos and Docker - mlab-sh/k3sec
github.com
November 4, 2026 at 10:31 AM
k3sec 1.8.0 🛡️
• Règles de détection CEL, rechargées à chaud
• Audit log de l’API server k8s
• eBPF : 0 événement perdu en burst, moitié moins de CPU, bruit de l’hôte filtré
• Connexions et DNS dédupliqués
http://
github.com/mlab-sh/k3sec
• Règles de détection CEL, rechargées à chaud
• Audit log de l’API server k8s
• eBPF : 0 événement perdu en burst, moitié moins de CPU, bruit de l’hôte filtré
• Connexions et DNS dédupliqués
http://
github.com/mlab-sh/k3sec
Groundcover’s new beta right-sizes Kubernetes workloads from eBPF telemetry. But engineers still decide where, and how far, the automation can go.
Groundcover automates Kubernetes sizing. Engineers set the bounds.
Groundcover’s new beta right-sizes Kubernetes workloads from eBPF telemetry. But engineers still decide where, and how far, the automation can go.
bit.ly
November 6, 2026 at 2:00 PM
Groundcover’s new beta right-sizes Kubernetes workloads from eBPF telemetry. But engineers still decide where, and how far, the automation can go.
November 3, 2026 at 12:03 PM
Speeding Up eBPF File Opens by 54% (Not AI Gen)
https://nathannaveen.dev/posts/speeding-up-ebpf-file-opens/
https://nathannaveen.dev/posts/speeding-up-ebpf-file-opens/
November 4, 2026 at 5:17 PM
Speeding Up eBPF File Opens by 54% (Not AI Gen)
https://nathannaveen.dev/posts/speeding-up-ebpf-file-opens/
https://nathannaveen.dev/posts/speeding-up-ebpf-file-opens/
学習ワークロードのオブザーバビリティ提供の観点でeBPFでCUDA APIをフックして分析するデモ作る。オーバーヘッド少ない方法を模索。
November 5, 2026 at 9:08 AM
学習ワークロードのオブザーバビリティ提供の観点でeBPFでCUDA APIをフックして分析するデモ作る。オーバーヘッド少ない方法を模索。
November 3, 2026 at 9:05 PM
🟠 CVE-2026-65960 - High (8.8)
Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before...
https://www.thehackerwire.com/vulnerability/CVE-2026-65960/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before...
https://www.thehackerwire.com/vulnerability/CVE-2026-65960/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
November 7, 2026 at 3:17 AM
🟠 CVE-2026-65960 - High (8.8)
Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before...
https://www.thehackerwire.com/vulnerability/CVE-2026-65960/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
Tetragon is an eBPF-based security observability and runtime enforcement project. Versions before...
https://www.thehackerwire.com/vulnerability/CVE-2026-65960/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
Send us a DM and we'll find you on the floor with free #Coroot stickers at Texas Linux Fest! Join us in Austin and learn how #eBPF is changing the observability landscape with Coroot Co-Founder Peter Zaitsev: 2026.texaslinuxfest.org
#linux #observability #opensource #homelab #kubernetes #txlf
#linux #observability #opensource #homelab #kubernetes #txlf
November 3, 2026 at 8:54 PM
Send us a DM and we'll find you on the floor with free #Coroot stickers at Texas Linux Fest! Join us in Austin and learn how #eBPF is changing the observability landscape with Coroot Co-Founder Peter Zaitsev: 2026.texaslinuxfest.org
#linux #observability #opensource #homelab #kubernetes #txlf
#linux #observability #opensource #homelab #kubernetes #txlf
204 lines of bpftrace for tracking per-process network traffic when iftop and nethogs fall short. Advanced, interface-level visibility. https://www.valtersit.com/python/ebpf-network-traffic-analyzer-with-bpftrace/
eBPF Network Traffic Analyzer with bpftrace
www.valtersit.com
November 5, 2026 at 2:10 AM
204 lines of bpftrace for tracking per-process network traffic when iftop and nethogs fall short. Advanced, interface-level visibility. https://www.valtersit.com/python/ebpf-network-traffic-analyzer-with-bpftrace/
What a pod network needs, how CNI plugins and kube-proxy provide it, what eBPF changes and how Cilium's components and security identities fit together.
#cilium #hubble #kubernetes #ebpf #containers
https://stdout.adegoodyer.com/posts/cilium-pods-cni-and-ebpf/?utm_source=bluesky
#cilium #hubble #kubernetes #ebpf #containers
https://stdout.adegoodyer.com/posts/cilium-pods-cni-and-ebpf/?utm_source=bluesky
Networking With Cilium and Hubble: Part 1 - Pods, CNI and eBPF
What a pod network needs, how CNI plugins and kube-proxy provide it, what eBPF changes and how Cilium's components and security identities fit together.
stdout.adegoodyer.com
November 3, 2026 at 8:45 AM
What a pod network needs, how CNI plugins and kube-proxy provide it, what eBPF changes and how Cilium's components and security identities fit together.
#cilium #hubble #kubernetes #ebpf #containers
https://stdout.adegoodyer.com/posts/cilium-pods-cni-and-ebpf/?utm_source=bluesky
#cilium #hubble #kubernetes #ebpf #containers
https://stdout.adegoodyer.com/posts/cilium-pods-cni-and-ebpf/?utm_source=bluesky
OpenTelemetry eBPF Instrumentation (OBI) reaches v1.0.0! 🎉
What 1.0 means in practice is predictability.
what it means? and what are the highlights of 1.0?
www.linkedin.com/posts/horovi...
#OpenTelemetry #eBPF #Observability #CNCFAmbassador @cncf.io
What 1.0 means in practice is predictability.
what it means? and what are the highlights of 1.0?
www.linkedin.com/posts/horovi...
#OpenTelemetry #eBPF #Observability #CNCFAmbassador @cncf.io
#opentelemetry #ebpf #observability #cncfambassador | Dotan Horovits
OpenTelemetry eBPF Instrumentation (OBI) reaches v1.0.0! 🎉
What 1.0 means in practice is predictability:
🔹 Config v2 is the configuration contract
🔹 Telemetry is described in a Weaver-compatible sc...
www.linkedin.com
November 3, 2026 at 7:00 PM
OpenTelemetry eBPF Instrumentation (OBI) reaches v1.0.0! 🎉
What 1.0 means in practice is predictability.
what it means? and what are the highlights of 1.0?
www.linkedin.com/posts/horovi...
#OpenTelemetry #eBPF #Observability #CNCFAmbassador @cncf.io
What 1.0 means in practice is predictability.
what it means? and what are the highlights of 1.0?
www.linkedin.com/posts/horovi...
#OpenTelemetry #eBPF #Observability #CNCFAmbassador @cncf.io
"OpenTelemetry #eBPF Instrumentation reaches v1.0.0" opentelemetry.io/blog/2026/ob...
OpenTelemetry eBPF Instrumentation reaches v1.0.0
We’re excited to announce v1.0.0 of OpenTelemetry eBPF Instrumentation—OBI!
OBI brings OpenTelemetry observability to running Linux applications without requiring changes to their source code. It uses...
opentelemetry.io
October 30, 2026 at 6:38 PM
"OpenTelemetry #eBPF Instrumentation reaches v1.0.0" opentelemetry.io/blog/2026/ob...
ecapture v2.10.0 — Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64. https://ktp.sh/5FPu2uRwcX
November 7, 2026 at 1:02 PM
ecapture v2.10.0 — Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64. https://ktp.sh/5FPu2uRwcX
#ばばさん通信ダイジェスト 賛否関わらず話題になった/なりそうなものを共有しています。
OpenTelemetry eBPF Instrumentation reaches v1.0.0
https://opentelemetry.io/blog/2026/obi-v1-release/
OpenTelemetry eBPF Instrumentation reaches v1.0.0
https://opentelemetry.io/blog/2026/obi-v1-release/
OpenTelemetry eBPF Instrumentation reaches v1.0.0
We’re excited to announce v1.0.0 of OpenTelemetry eBPF Instrumentation—OBI!
OBI brings OpenTelemetry observability to running Linux applications without requiring changes to their source code. It uses eBPF, together with runtime-specific instrumentation, to capture application metrics and traces across services, languages, and frameworks. You can start with request rates, errors, latency, and service dependencies, then build deeper visibility as your needs grow.
This release fulfills the flagship goal we set for 2026: establishing a stable foundation for OBI. It represents a year of expanding instrumentation coverage, improving correctness, strengthening release tooling, and building the compatibility and telemetry migration practices that users need to operate OBI over time.
opentelemetry.io
November 4, 2026 at 1:55 AM
#ばばさん通信ダイジェスト 賛否関わらず話題になった/なりそうなものを共有しています。
OpenTelemetry eBPF Instrumentation reaches v1.0.0
https://opentelemetry.io/blog/2026/obi-v1-release/
OpenTelemetry eBPF Instrumentation reaches v1.0.0
https://opentelemetry.io/blog/2026/obi-v1-release/
ebpf can propose the right size. the product is the approval boundary. if automation can resize without an engineer-named budget, the beta already left the sandbox.
November 6, 2026 at 2:51 PM
ebpf can propose the right size. the product is the approval boundary. if automation can resize without an engineer-named budget, the beta already left the sandbox.
🔗 Found our Django app was losing 2 seconds per request to GIL and GC. Built an eBPF tool to catch it.
#development #devops #django #python #reading-list #tools
#development #devops #django #python #reading-list #tools
Found our Django app was losing 2 seconds per request to GIL and GC. Built an eBPF tool to catch it.
#development #devops #django #python #reading-list #tools
www.reddit.com
November 4, 2026 at 9:05 AM
🔗 Found our Django app was losing 2 seconds per request to GIL and GC. Built an eBPF tool to catch it.
#development #devops #django #python #reading-list #tools
#development #devops #django #python #reading-list #tools
#OpenTelemetry eBPF Instrumentation (OBI) v1.0 is here!
A year of community collaboration has delivered a stable foundation for OBI that includes broader database and messaging coverage, improved distributed tracing, and expanded AI instrumentation.
Explore the release:
buff.ly/x2fUWQE
A year of community collaboration has delivered a stable foundation for OBI that includes broader database and messaging coverage, improved distributed tracing, and expanded AI instrumentation.
Explore the release:
buff.ly/x2fUWQE
OpenTelemetry eBPF Instrumentation reaches v1.0.0
We’re excited to announce v1.0.0 of OpenTelemetry eBPF Instrumentation—OBI! OBI brings OpenTelemetry observability to running Linux applications without requiring changes to their source code. It…
buff.ly
October 30, 2026 at 4:49 PM
#OpenTelemetry eBPF Instrumentation (OBI) v1.0 is here!
A year of community collaboration has delivered a stable foundation for OBI that includes broader database and messaging coverage, improved distributed tracing, and expanded AI instrumentation.
Explore the release:
buff.ly/x2fUWQE
A year of community collaboration has delivered a stable foundation for OBI that includes broader database and messaging coverage, improved distributed tracing, and expanded AI instrumentation.
Explore the release:
buff.ly/x2fUWQE
🚀 Open Source: eBPF-Egress-Jail
⚡ Metric: High Efficiency
Repo: https://github.com/az-consultants-org/az-consultants-hub
Intake: https://github.com/az-consultants-org/az-consultants-hub/issues/new?template=audit_intake.yml
#DevOps #OpenSource
⚡ Metric: High Efficiency
Repo: https://github.com/az-consultants-org/az-consultants-hub
Intake: https://github.com/az-consultants-org/az-consultants-hub/issues/new?template=audit_intake.yml
#DevOps #OpenSource
November 6, 2026 at 9:00 AM
🚀 Open Source: eBPF-Egress-Jail
⚡ Metric: High Efficiency
Repo: https://github.com/az-consultants-org/az-consultants-hub
Intake: https://github.com/az-consultants-org/az-consultants-hub/issues/new?template=audit_intake.yml
#DevOps #OpenSource
⚡ Metric: High Efficiency
Repo: https://github.com/az-consultants-org/az-consultants-hub
Intake: https://github.com/az-consultants-org/az-consultants-hub/issues/new?template=audit_intake.yml
#DevOps #OpenSource
Security advisories 10/34
AWS fixes EKS network policy bypass and a Firecracker memory flaw
Bulletin 2026-170 covers a shared eBPF state bug that lets a neighbouring pod slip past NetworkPolicy ingress rules on EKS.
#infosec #cybersecurity
trustlist.uk/security-advisorie…
AWS fixes EKS network policy bypass and a Firecracker memory flaw
Bulletin 2026-170 covers a shared eBPF state bug that lets a neighbouring pod slip past NetworkPolicy ingress rules on EKS.
#infosec #cybersecurity
trustlist.uk/security-advisorie…
AWS fixes EKS network policy bypass and a Firecracker memory flaw
Bulletin 2026-170 covers a shared eBPF state bug that lets a neighbouring pod slip past NetworkPolicy ingress rules on EKS. Bulletin 2026-169 fixes guest access to Firecracker memory in one snapshot…
trustlist.uk
November 6, 2026 at 9:35 AM
Security advisories 10/34
AWS fixes EKS network policy bypass and a Firecracker memory flaw
Bulletin 2026-170 covers a shared eBPF state bug that lets a neighbouring pod slip past NetworkPolicy ingress rules on EKS.
#infosec #cybersecurity
trustlist.uk/security-advisorie…
AWS fixes EKS network policy bypass and a Firecracker memory flaw
Bulletin 2026-170 covers a shared eBPF state bug that lets a neighbouring pod slip past NetworkPolicy ingress rules on EKS.
#infosec #cybersecurity
trustlist.uk/security-advisorie…
ecapture v2.10.0 https://kitploit.com/en/posts/ecapture-cd4bb4cfe0a26892
ecapture v2.10.0 — Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64. | Kitploit
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
kitploit.com
November 7, 2026 at 12:42 PM
ecapture v2.10.0 https://kitploit.com/en/posts/ecapture-cd4bb4cfe0a26892
本日18:00〜開催の「eBPF Japan Meetup#8」に、 @masu-mi.bsky.social が登壇します！
📢タイトル：「bpf_arenaとstruct_ops を使うのが難しかった話 - s3fs代替を作ってみて気づいたこと-」
詳細はこちら： ebpf.connpass.com/event/404549/
ぜひご参加ください！
#CNCJ #ebpfjp #BBSakura
📢タイトル：「bpf_arenaとstruct_ops を使うのが難しかった話 - s3fs代替を作ってみて気づいたこと-」
詳細はこちら： ebpf.connpass.com/event/404549/
ぜひご参加ください！
#CNCJ #ebpfjp #BBSakura
eBPF Japan Meetup #8 (2026/11/06 17:30〜)
# イベント概要 第8回はさくらインターネット株式会社様に会場スポンサーをしていただき、さくらインターネット株式会社様の東京支社からお送りします。今回のテーマは「eBPFを愛でる」で実施します。 * X ハッシュタグ： #CNCJ, #ebpfjp ## 参加登録方法 connpass ではなく、 CNCF にて参加登録をお願いいたします。 ## 行動規範 (Code of Cond...
ebpf.connpass.com
November 6, 2026 at 1:29 AM
本日18:00〜開催の「eBPF Japan Meetup#8」に、 @masu-mi.bsky.social が登壇します！
📢タイトル：「bpf_arenaとstruct_ops を使うのが難しかった話 - s3fs代替を作ってみて気づいたこと-」
詳細はこちら： ebpf.connpass.com/event/404549/
ぜひご参加ください！
#CNCJ #ebpfjp #BBSakura
📢タイトル：「bpf_arenaとstruct_ops を使うのが難しかった話 - s3fs代替を作ってみて気づいたこと-」
詳細はこちら： ebpf.connpass.com/event/404549/
ぜひご参加ください！
#CNCJ #ebpfjp #BBSakura