🐝 Cilium - hello · Scour

eBPF rootkits and the Volatility blind spot in Linux memory forensics 🔍eBPF

andreafortuna.org·5d·Hacker News

Provisioning a Private Talos Kubernetes Cluster on Hetzner Cloud ☁️Cloudflare Workers

onatm.dev·2d·Hacker News

Research Update: Isolated Execution Environment for eBPF (Part 3) 🔒BPF LSM

ebpf.foundation·13h

Less-relevant results

Overcoming IP Churn in Ephemeral DevOps Environments Using Userspace Overlays 🕸️Service Mesh

grafana/beyla v3.16.0 🔍eBPF

The Kubernetes integration tax: Prometheus, Cilium and production reality ☸️Kubernetes

Heimdall: Formally Verified Automated Migration of Legacy eBPF Programs to Rust 🔀Crossbeam

arxiv.org·6d·Hacker News

KernelScript 0.1 Debuts as a New Language for eBPF Development ⚙️SWC

Jonas Hietala: Just: command runner & documentation 🐧Linux

jonashietala.se·4d

How LinkedIn Identified a Kernel Lock Contention Issue Causing Recurring System Freezes 📍CPU Pinning

yeet-src/poolnarc: Behavioral hidden-cryptominer detector for Linux in eBPF — flags processes talking to mining-pool ports while spoofing kernel-thread names. No signatures, no agent, no cloud. CO-RE portable. 🔍Linux BPF

github.com·6h·Hacker News

The CNF Illusion: Navigating the Realities of Cloud-Native Networking ⚖️Katran

vahidhashemi.com·3d·Hacker News

yeet-src/usbsnoop: Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no hardware sniffer. CO-RE portable. ⏰Timestamping

github.com·1d·Hacker News, r/linux

Grimlock: Guarding High-Agency Systems with eBPF and Attested Channels 🔒Tetragon

facebook/mcpguard-dynamic: Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP) 🔍eBPF

github.com·5d·r/mcp

Beyond Thread States: Diagnosing Performance Degradation with eBPF and Thread Dynamics 🔁eBPF Tail Calls

IdiotCoffee/dhrishti: Runtime observability for distributed systems using eBPF and graph inference. 🔍eBPF

github.com·4d·DEV

I open-sourced KernelEye — an eBPF/XDP-based Linux server security monitoring project 🔍eBPF

github.com·6d·r/linuxadmin

xilioscient/troskji: Post-quantum multi-path tunnel — Hybrid KEM (X25519+Kyber-1024) · Shamir 3-of-5 SSS · BLAKE3 · XDP/eBPF cover traffic · Rust 📨NATS

github.com·6d·Hacker News

Release Wazuh v4.14.6-rc1 📦Trunk

Log in to enable infinite scrolling