16 May 2022
Valencia, Spain
View More Details & Registration

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Europe 2022 - Valencia, Spain and add this Co-Located event to your registration to participate in these sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Central European Standard Time, UTC +2. To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."  The schedule is subject to change.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.
Back To Schedule
Monday, May 16 • 13:30 - 14:00
Falco & eBPF: Is the only Limit the Sky? - Federico Di Pierro, Sysdig & Andrea Terzolo, Politecnico di Torino

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
eBPF is a powerful technology, but how could it be used in critical scenarios with throughputs higher than billions events per second? If this question doesn't make you sleep at night, this is the right talk for you. Building a large scale tracing tool is hard... Falco uses BPF to trace syscalls, page-faults, context-switches, and many other system events; but collecting all of those inevitably leads to data losses. The situation becomes even more complex when we consider the portability issue: supporting lots kernel versions, even very old ones, means not being able to take advantages of all modern BPF concepts like ring-buffer, global variables, and other advanced tracing features. Starting from these assumptions, Andrea and Federico will drive you through the actual BPF probe architecture, its strengths, and the criticalities that must be faced every day. More precisely, they will outline some possible mitigations to actual problems and what they are planning for the future to improve the situation, exploiting, when possible, modern BPF tracing features.

Click here to view captioning/translation in the MeetingPlay platform!

avatar for Federico Di Pierro

Federico Di Pierro

Open Source Engineer, Sysdig
Since I started programming, around 10 years ago, I was always fascinated by Open Source world. Using linux as my daily driver, and C as main programming language, throughout my career I always looked forward to work for the Open Source community, a thing that I can say to enjoy very... Read More →
avatar for Andrea Terzolo

Andrea Terzolo

Research fellow, Politecnico di Torino
During my studies in Cybersecurity, I had the opportunity to get in touch with the Linux kernel and all its complexity. I was very impressed! So, after graduation, I started a research activity with the Polytechnic of Turin on an emerging technology: eBPF. And guess what? I fell in... Read More →

Monday May 16, 2022 13:30 - 14:00 CEST
Pavilion 4 | Room A | Level 2 | Central Forum