Archive - eBPFChirp

Two‑Phase eBPF Program Signing: Bridging Compilation and Load‑Time Integrity

Combining original and post‑load signatures for end‑to‑end code integrity

Aug 5 •

Teodor J. Podobnik

July 2025

When TCP Window Scaling Broke Our API — and How I Solve It with eBPF

Solving a 2AM Production Outage

Jul 29 •

Teodor J. Podobnik

Interview with Bill Mulligan, Cilium and eBPF Community Pollinator

#1 eBPFChirp Episode

Jul 24 •

Teodor J. Podobnik

23:43

How Cycode Optimized CI/MON eBPF Agent to Handle Thousands of Events per Second

eBPF has fundamentally changed the way developers think about system-level observability, performance monitoring, and security.

Jul 22 •

Teodor J. Podobnik

Invite your friends to read eBPFChirp

Thank you for reading eBPFChirp — your support allows me to keep doing this work.

Jul 16 •

Teodor J. Podobnik

Troubleshooting Container OOM Kills with eBPF

So I had a little time on my hands a couple weeks ago and decided to explore how to use eBPF to monitor container Out Of Memory (OOM) kills.

Jul 15 •

Teodor J. Podobnik

Testing eBPF Program Compatibility Across Kernels with LVH and GitHub Actions

GitHub Actions Meets Little VM Helper and eBPF

Jul 8 •

Teodor J. Podobnik

How to Find Supported eBPF Helper Functions for Any Kernel & Program Type

Three practical methods—bpftool, eBPF Docs, and a kernel-source deep-dive—to verify which helpers your eBPF program can really use.

Jul 1 •

Teodor J. Podobnik

and

Patrick Pichler

June 2025

Building a Real-Time Process Monitor with eBPF and Go

Step by Step Guide for Beginners

Jun 24 •

Teodor J. Podobnik

and

Reading Between the Bytes: Inspecting Compiled eBPF with bpftool, readelf & llvm-objdump

From eBPF C Source Code to Kernel-Ready ELF

Jun 21 •

Teodor J. Podobnik

and

Giuseppe Ognibene

May 2025

eBPF and the Energy Footprint of Modern AI Infrastructure

As AI and cloud workloads grow, eBPF is powering a new wave of energy observability

May 22 •

Teodor J. Podobnik

April 2025

Why Does My eBPF Program Work on One Kernel but Fail on Another?

How to Build Truly Portable eBPF Programs

Apr 23 •

Teodor J. Podobnik

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts