Filip Nikolic – Demystifying eBPF - eBPF Firewall from scratch

eBPF has emerged as a powerful technology for extending the Linux kernel, enabling users to safely and efficiently run custom code within the kernel. One of the most popular applications of eBPF is in the realm of networking, where it is used to implement high-performance firewalls and other security-related functionality. eBPF is becoming increasingly popular in the cloud-native ecosystem, with many CNCF projects utilizing its capabilities, including Cilium, Calico, and Pixie to name a few. This talk aims to demystify eBPF and demonstrate how it can be used to build a firewall from scratch. By highlighting core concepts of eBPF, attendees can better understand how it is being used in real-world scenarios, by various CNCF projects and how it can be applied to their own use cases.