eBPF

eBPF is a pure Go library that provides utilities for loading, compiling, and debugging eBPF programs. It has minimal external dependencies and is intended to be used in long running processes.

asm contains a basic assembler
link allows attaching eBPF to various hooks
perf allows reading from a PERF_EVENT_ARRAY
cmd/bpf2go allows embedding eBPF in Go

The library is maintained by Cloudflare and Cilium. Feel free to join the #libbpf-go channel on Slack.

Current status

The package is production ready, but the API is explicitly unstable right now. Expect to update your code if you want to follow along.

Requirements

A version of Go that is supported by upstream
Linux 4.9, 4.19 or 5.4 (versions in-between should work, but are not tested)

Useful resources

Regenerating Testdata

Run make in the root of this repository to rebuild testdata in all subpackages. This requires Docker, as it relies on a standardized build environment to keep the build output stable.

The toolchain image build files are kept in testdata/docker/.

License

MIT

1.9 KiB Raw Blame History