most devs think eBPF is "that networking thing cloudflare uses"
it's this:
you can run your own code inside the linux kernel, safely, with no module, no patch, no reboot, on a box that's serving traffic right now
a verifier proves your program can't crash the kernel or loop forever. then it's JIT'd to native speed. that's the whole trick
what eBPF actually buys you:
- see every exec, every file open, every TCP connect on the host. no agent inside the app, no code change, no restart
- read TLS traffic before it's encrypted. uprobe on SSL_write. plaintext requests out of a binary you don't own and can't rebuild
- drop millions of packets/sec at the driver, before the kernel allocates an sk_buff. that's XDP. that's how DDoS mitigation works now
- delete iptables. cilium does k8s service routing in BPF hash maps instead of walking a linear rule chain that grows with your cluster
- continuous profiling of every process on the box, every language, zero instrumentation, single-digit percent overhead. parca, pyroscope
- block the syscall, not the alert. tetragon and falco don't just detect, they can kill the process at the hook
- swap the CPU scheduler at runtime. sched_ext landed in 6.12. valve wrote one for the steam deck
the mental model: your kernel now has event listeners. syscalls, kernel functions, packets, cgroups. attach, filter, aggregate into a map, read from userspace
the part nobody puts on the landing page: the verifier will reject perfectly correct code and hand you a 400-line register state dump as the explanation. it's like arguing with a compiler that has decided it hates you personally
worth it anyway. observability stops being a thing you build into your app and becomes a thing you point at it
what's the most cursed thing you've done with it?
SHA-256, the algorithm behind Bitcoin and countless TLS certificates, fits into roughly 100 lines of standard C
the implementation is just bitwise rotations, Ch, Maj, round constants, and 32-bit arithmetic
it pads the message, expands 16 words into a 64-word schedule, runs 64 rounds, and produces the NIST-verified digest
I truly believe Rust’s biggest advantage over Go is the ownership model.
Rust makes memory ownership and concurrency part of the language’s structure and makes stronger guarantees.
Me dicen que la estructura de Iván Mordisco la está pasando mal, ojalá le den muchos regalos desde el aire.
El cáncer no se trata al cáncer se extirpa.
GLORIA A MIS FUERZAS MILITARES Y POLICÍA. 🇨🇴🇨🇴🇨🇴🇨🇴
The Network School is the modern evolution of the YC model. Talent, capital, education, and community are in one place and inspired by a culture of innovation and experimentation.
Network School is back.
We’re up and running in the beautiful country of Kazakhstan, which combines high tech, low cost, brilliant people, a competent state, and plenty of space to build.
So: if you want to build a techno-optimist society with us, apply to Network School.
Adding this to my reading list: "Understanding the Limitations of Pubsub Systems" by Atul Adya, Phil Bogle, and Colin Meek (Databricks) - Adya's a prominent name in distributed systems, so curious to dig into this one.
https://t.co/U8K14lHJPY
If you've already read this, what are your thoughts?
pueden berriar, patalear y echar espuma por la jeta, pero Abelardo ha demostrado en tiempo récord que es un presidente de verdad: firme, sin miedo que está trabajando duro por Colombia. 🇨🇴
¡Es un honor ser una vez más su candidata republicana al Congreso por el Distrito 27 de Florida! 🇺🇸🗳️
Gracias a los republicanos de nuestro distrito por elegir resultados por encima de la retórica, una voz independiente por encima de los jefes de partido y la libertad por encima del socialismo.
En el Congreso, seguiré votando por lo que sea mejor para ustedes, mis constituyentes, y no por lo que exijan los de siempre en Washington.
Seguiré luchando para bajar los impuestos, encontrar soluciones a nuestra crisis de vivienda, construir apoyo bipartidista para arreglar nuestro quebrado sistema de inmigración y enfrentar con firmeza a los socialistas demócratas que han tomado el control del Partido Demócrata.
La lucha para mantener al Distrito 27 ROJO y a Florida LIBRE continúa. Y, si Dios quiere, ¡en noviembre derrotaremos a la izquierda radical! 🇺🇸