eBPF looks cheap but isn't free: Bitbison's deep dive on hooks, CO-RE reads and rings
tianyin_xu · x · 2026-09-03
eBPF underlies most modern infrastructure—containers, Kubernetes networking, and most security products—and everyone assumes it's cheap. Bitbison notes it can be, but there are plenty of performance foot-guns. The company hooks massive numbers of syscalls to build a causal model of every event on a system (powering its verifiable Linux security platform), so slowdowns matter. Their full writeup covers hooking, CO-RE reads, maps, rings, and dynamic data structures.
More from Infra
- Broadcom CEO: Anthropic and OpenAI to become its No.1 and No.2 custom AI chip clients — dinabass · 2026-09-03
- Hock Tan says power availability dictates the exact timing of compute capacity deployment — BenBajarin · 2026-09-03
- Perplexity open-sources its Mac inference server optimized for Qwen 3.6 on Apple Silicon — Specter_Origin · 2026-09-03
- GLM-5.3-Flash hits 1,005 tok/s locally on dual RTX PRO 6000 Blackwell cards — BanghuaZ · 2026-09-03
- Nvidia now ~8% of S&P 500 market cap, worth 16.3% of US GDP at $5.3T — ivan_bezdomny · 2026-09-03
- Broadcom Q3 AI chip revenue hits $16.7B, up 221% YoY; guides $21.7B for Q4 — Beth_Kindig · 2026-09-03