ebpf

https://blog.pixielabs.ai/ebpf
https://docs.cilium.io/en/v1.9/
https://blogs.igalia.com/dpino/2019/01/07/introduction-to-xdp-and-ebpf/
https://lwn.net/Articles/603983/
https://www.joyfulbikeshedding.com/blog/2019-01-31-full-system-dynamic-tracing-on-linux-using-ebpf-and-bpftrace.html
https://ebpf-docs.dylanreimerink.nl/
linux lore page: https://lore.kernel.org/bpf/

ebpf architecture

[High-Level Code (C)]
         |
         v
[1. Compiler Frontend (Clang)]
         |
         | (Generates)
         v
[2. LLVM Intermediate Representation (IR)]
         |
         | (Optimizations)
         v
[3. Compiler Middle End (LLVM Optimizer)]
         |
         | (Translates)
         v
[4. Compiler Backend (eBPF Target in LLVM)]
         |
         | (eBPF Bytecode)
         v
[5. eBPF Loader (libbpf)]
         |
         | (Verification and JIT Compilation)
         v
[6. Linux Kernel (eBPF VM)]

Links to this note

kubectl-trace
linux