Introduction to XDP, eBPF and AF_XDP

Harald Welte (sysmocom)

Playlists: 'osmodevcon2024' videos starting here / audio

This talk provides a generic introduction to a set of modern Linux kernel technologies:

* [eBPF](https://ebpf.io/what-is-ebpf/) (extended Berkeley Packet Filter) is a kind of virtual machine that runs sandboxed programs inside the Linux kernel.
* [XDP](https://docs.cilium.io/en/latest/bpf/progtypes/#xdp) (eXpress Data Path) is a framework for eBPF that enables high-performance programmable packet processing in the Linux kernel
* [AF_XDP](https://www.kernel.org/doc/html/next/networking/af_xdp.html) is an *address family* that is optimized for high-performance packet processing. It allows in-kernel XDP eBPF programs to efficiently pass packets to userspace via memory-mapped ring buffers.

The talk will provide a high-level overview. It should provide some basics before the other/later talks on bpftrace and eUPF.

Download

Embed

Share:

Tags