Datadog On Maintaining eBPF at Scale

The extended Berkeley Packet Filter, eBPF has resulted in an ecosystem of new tooling that allows running programs in the linux kernel without loading kernel modules. eBPF seeks to do this safety within a secure sandbox environment and has been a boon to observability and security. Join this session for a deep dive on how we scale eBPF at Datadog to monitor 1000s of diverse hosts on a variety of architectures. eBPF plays a core role in different domains application and infrastructure observability, runtime security, and developer tools. In this episode you’ll hear from Guy Arbitman and Valeri Pliskin to explore just how we keep eBPF portable, performant, and secure for both customers and Datadog alike. You’ll leave the session with a firm understanding of the security, portability, and performance concerns associated with this type of monitoring as well as guidance on how to select tools and products that incorporate the technology.