eunomia-bpf/bpf-developer-tutorial resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

4254 stars · 596 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A step-by-step open-source eBPF developer tutorial based on CO-RE, with dozens of short, self-contained example tools built with libbpf, Cilium, libbpf-rs, and eunomia-bpf in C, Go, and Rust. It covers beginner to advanced topics including kprobes, uprobes, ring buffers, XDP, BPF iterators, arena, dynptrs, struct_ops, and BPF tokens.

Use cases

• learn eBPF development step by step
• find minimal eBPF example code for kprobes and uprobes
• write an XDP packet processing program
• monitor file opens or process execution with eBPF
• understand BPF ring buffers and perf event arrays
• explore advanced kernel features like BPF arena and struct_ops
• build observability tools with libbpf CO-RE

When to choose

• you want hands-on, runnable eBPF examples rather than long conceptual explanations
• you are learning libbpf-based CO-RE development in C, Go, or Rust
• you need short reference implementations of common eBPF tool patterns
• you want to keep up with newer kernel features like dynptrs, workqueues, and BPF tokens

When to avoid

• you need deep theoretical coverage of kernel internals or verifier theory
• you prefer BCC-based Python development workflows
• you need production-ready, supported eBPF tooling rather than educational examples

Facets

learning-resource · maturity active

developer-tools monitoring security networking developer-tools operating-systems tutorials monitoring security c go rust cli ebpf bpf libbpf xdp kernel-programming observability co-re tutorial examples linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="eunomia-bpf/bpf-developer-tutorial")