Paul Chaignon
@pchaigno.bsky.social
System security, eBPF, and programmable networks. Working on Cilium's BPF-based datapath. He/him.
Pinned
Paul Chaignon
@pchaigno.bsky.social
· Mar 18
BPF Isn’t About Speed
This post benchmarks various approaches to filter egress traffic in the Linux kernel. It compares iptables, ipset, tc-bpf, and cgroup-bpf. It demonstrates how diverse aspects of the eBPF implementatio...
pchaigno.github.io
It does not make sense to compare the performance of nftables and eBPF.
eBPF can take many different forms. Its performance will largely depend on its hook point, its maps, the algorithm its implementing. That's the point I tried to illustrate in pchaigno.github.io/ebpf/2020/09....
eBPF can take many different forms. Its performance will largely depend on its hook point, its maps, the algorithm its implementing. That's the point I tried to illustrate in pchaigno.github.io/ebpf/2020/09....
The HotNets 2025 program and papers are available! Similar mix of topics as SIGCOMM, with lots of AI, some host networking, some LEO, some eBPF...
conferences.sigcomm.org/hotnets/2025...
conferences.sigcomm.org/hotnets/2025...
HotNets 2025: Program
conferences.sigcomm.org
November 18, 2025 at 4:31 PM
The HotNets 2025 program and papers are available! Similar mix of topics as SIGCOMM, with lots of AI, some host networking, some LEO, some eBPF...
conferences.sigcomm.org/hotnets/2025...
conferences.sigcomm.org/hotnets/2025...
The talks for the Networking track of Linux Plumbers 2025 are up! An XDP API redesign, rich packet metadata, XDP offload to AMD GPUs... There are a few #eBPF topics, but also many classic networking talks.
lpc.events/event/19/ses...
lpc.events/event/19/ses...
Linux Plumbers Conference 2025
The Linux Plumbers Conference
(LPC) is a developer conference for the open source community. The LPC
brings together the top developers working on the plumbing of Linux -
kernel subsys...
lpc.events
October 27, 2025 at 4:01 PM
The talks for the Networking track of Linux Plumbers 2025 are up! An XDP API redesign, rich packet metadata, XDP offload to AMD GPUs... There are a few #eBPF topics, but also many classic networking talks.
lpc.events/event/19/ses...
lpc.events/event/19/ses...
At GNU Tools Cauldron, Eduard Zingerman presented 4 examples of compiler optimizations that can break #eBPF verification in Linux. The discussion then focused on how to mitigate this in GCC, with a potential -fverifiable flag.
Video: www.youtube.com/watch?v=DgiE...
Article: lwn.net/Articles/103...
Video: www.youtube.com/watch?v=DgiE...
Article: lwn.net/Articles/103...
October 24, 2025 at 3:06 PM
At GNU Tools Cauldron, Eduard Zingerman presented 4 examples of compiler optimizations that can break #eBPF verification in Linux. The discussion then focused on how to mitigate this in GCC, with a potential -fverifiable flag.
Video: www.youtube.com/watch?v=DgiE...
Article: lwn.net/Articles/103...
Video: www.youtube.com/watch?v=DgiE...
Article: lwn.net/Articles/103...
Agni is now able to formally verify core #eBPF verifier logic in ~10 minutes! And all LTS kernels are covered daily!
github.com/bpfverif/agn...
github.com/bpfverif/agn...
October 16, 2025 at 3:31 PM
Agni is now able to formally verify core #eBPF verifier logic in ~10 minutes! And all LTS kernels are covered daily!
github.com/bpfverif/agn...
github.com/bpfverif/agn...
At Kernel Recipes, Roman Gushchin presented his work on customizing the Linux out-of-memory handling with #eBPF. It allows you to control when the OOM killer is triggered and how to free memory (typically, what to kill).
Code: lore.kernel.org/bpf/20250818...
Video: www.youtube.com/watch?v=pgDI...
Code: lore.kernel.org/bpf/20250818...
Video: www.youtube.com/watch?v=pgDI...
October 15, 2025 at 3:01 PM
At Kernel Recipes, Roman Gushchin presented his work on customizing the Linux out-of-memory handling with #eBPF. It allows you to control when the OOM killer is triggered and how to free memory (typically, what to kill).
Code: lore.kernel.org/bpf/20250818...
Video: www.youtube.com/watch?v=pgDI...
Code: lore.kernel.org/bpf/20250818...
Video: www.youtube.com/watch?v=pgDI...
The list of talks accepted for the #eBPF track at Linux Plumbers 2025 has been published: lpc.events/event/19/ses...! See you in Tokyo!
(You may need to click on Contribution list to see the talks.)
(You may need to click on Contribution list to see the talks.)
October 8, 2025 at 3:31 PM
The list of talks accepted for the #eBPF track at Linux Plumbers 2025 has been published: lpc.events/event/19/ses...! See you in Tokyo!
(You may need to click on Contribution list to see the talks.)
(You may need to click on Contribution list to see the talks.)
I've added 6 recent research papers on eBPF to my list, from SIGCOMM'25, SOSP'25, and IEEE S&P'25: pchaigno.github.io/bpf/2025/01/....
October 6, 2025 at 3:01 PM
I've added 6 recent research papers on eBPF to my list, from SIGCOMM'25, SOSP'25, and IEEE S&P'25: pchaigno.github.io/bpf/2025/01/....
I've written a guide on how to test BPF verifier changes using Cilium's collection of #eBPF programs: pchaigno.github.io/ebpf/2025/09...
Test Verifier Changes on Cilium’s BPF Programs
This post describes how to use Cilium’s large BPF programs to test and evaluate your changes to the Linux BPF verifier or to any other aspect of the kernel.
pchaigno.github.io
September 23, 2025 at 3:41 PM
I've written a guide on how to test BPF verifier changes using Cilium's collection of #eBPF programs: pchaigno.github.io/ebpf/2025/09...
At the eBPF workshop, Panayiotis Gavriil introduced uXDP, a new XDP runtime that allows you to run unmodified XDP programs on top of DPDK or AF_XDP. uXDP was able to improve the performance of an unmodified Katran by 40%!
Slides: drive.google.com/file/d/1xrGE...
Paper: dl.acm.org/doi/pdf/10.1...
Slides: drive.google.com/file/d/1xrGE...
Paper: dl.acm.org/doi/pdf/10.1...
September 18, 2025 at 4:54 PM
At the eBPF workshop, Panayiotis Gavriil introduced uXDP, a new XDP runtime that allows you to run unmodified XDP programs on top of DPDK or AF_XDP. uXDP was able to improve the performance of an unmodified Katran by 40%!
Slides: drive.google.com/file/d/1xrGE...
Paper: dl.acm.org/doi/pdf/10.1...
Slides: drive.google.com/file/d/1xrGE...
Paper: dl.acm.org/doi/pdf/10.1...
Traditional profiling tools can introduce a lot of overhead when tracing XDP programs. At the eBPF workshop, Vladimiro Paschali presented a new tool that significantly reduces that overhead.
Slides: drive.google.com/file/d/1qsBS...
Paper: dl.acm.org/doi/pdf/10.1...
Code: github.com/VladimiroPas...
Slides: drive.google.com/file/d/1qsBS...
Paper: dl.acm.org/doi/pdf/10.1...
Code: github.com/VladimiroPas...
September 18, 2025 at 4:50 PM
Traditional profiling tools can introduce a lot of overhead when tracing XDP programs. At the eBPF workshop, Vladimiro Paschali presented a new tool that significantly reduces that overhead.
Slides: drive.google.com/file/d/1qsBS...
Paper: dl.acm.org/doi/pdf/10.1...
Code: github.com/VladimiroPas...
Slides: drive.google.com/file/d/1qsBS...
Paper: dl.acm.org/doi/pdf/10.1...
Code: github.com/VladimiroPas...
Reposted by Paul Chaignon
For its academic research grants, eBPF Foundation received 27 proposals from 23 universities, ranging from improving verifier safety guarantees to enabling new use cases where eBPF can make a difference.
Two proposals will each receive a $50,000 research grant
ebpf.foundation/ebpf-foundat...
Two proposals will each receive a $50,000 research grant
ebpf.foundation/ebpf-foundat...
September 17, 2025 at 10:15 AM
For its academic research grants, eBPF Foundation received 27 proposals from 23 universities, ranging from improving verifier safety guarantees to enabling new use cases where eBPF can make a difference.
Two proposals will each receive a $50,000 research grant
ebpf.foundation/ebpf-foundat...
Two proposals will each receive a $50,000 research grant
ebpf.foundation/ebpf-foundat...
At the eBPF workshop, Srinivas Narayana presented a new approach to synthesize part of the #eBPF verifier. His team used it to improve the addition and subtraction analysis in Linux.
Slides: drive.google.com/file/d/1BbMr...
Paper: people.cs.rutgers.edu/~sn624/paper...
Code: github.com/bpfverif/vayu
Slides: drive.google.com/file/d/1BbMr...
Paper: people.cs.rutgers.edu/~sn624/paper...
Code: github.com/bpfverif/vayu
September 17, 2025 at 3:00 PM
At the eBPF workshop, Srinivas Narayana presented a new approach to synthesize part of the #eBPF verifier. His team used it to improve the addition and subtraction analysis in Linux.
Slides: drive.google.com/file/d/1BbMr...
Paper: people.cs.rutgers.edu/~sn624/paper...
Code: github.com/bpfverif/vayu
Slides: drive.google.com/file/d/1BbMr...
Paper: people.cs.rutgers.edu/~sn624/paper...
Code: github.com/bpfverif/vayu
The papers and slides from the SIGCOMM'25 #eBPF workshop are all online now! pchaigno.github.io/ebpf/2025/09...
Thanks to everyone who participated and presented in this third edition!
Thanks to everyone who participated and presented in this third edition!
September 17, 2025 at 2:30 PM
The papers and slides from the SIGCOMM'25 #eBPF workshop are all online now! pchaigno.github.io/ebpf/2025/09...
Thanks to everyone who participated and presented in this third edition!
Thanks to everyone who participated and presented in this third edition!
At SIGCOMM'25 yesterday, Alibaba Cloud showed how they improved the performance of their L7 LB in part with sk_reuseport #eBPF programs. As a result, they improved the efficiency of their L7 LB by almost 20%!
Video: www.youtube.com/watch?v=J22-...
Paper: dl.acm.org/doi/pdf/10.1...
Video: www.youtube.com/watch?v=J22-...
Paper: dl.acm.org/doi/pdf/10.1...
September 10, 2025 at 3:32 PM
At SIGCOMM'25 yesterday, Alibaba Cloud showed how they improved the performance of their L7 LB in part with sk_reuseport #eBPF programs. As a result, they improved the efficiency of their L7 LB by almost 20%!
Video: www.youtube.com/watch?v=J22-...
Paper: dl.acm.org/doi/pdf/10.1...
Video: www.youtube.com/watch?v=J22-...
Paper: dl.acm.org/doi/pdf/10.1...
I'm at SIGCOMM'25 until the end of the conference. Ping me if you want to chat about anything eBPF related! I'm interested to see what people are trying to build!
September 10, 2025 at 8:33 AM
I'm at SIGCOMM'25 until the end of the conference. Ping me if you want to chat about anything eBPF related! I'm interested to see what people are trying to build!
The top networking academic conference, SIGCOMM, is happening next week and the 88 papers are already available!
conferences.sigcomm.org/sigcomm/2025...
conferences.sigcomm.org/sigcomm/2025...
September 4, 2025 at 2:31 PM
The top networking academic conference, SIGCOMM, is happening next week and the 88 papers are already available!
conferences.sigcomm.org/sigcomm/2025...
conferences.sigcomm.org/sigcomm/2025...
The list of papers accepted at the 3rd #eBPF workshop has been published! conferences.sigcomm.org/sigcomm/2025...
August 11, 2025 at 3:32 PM
The list of papers accepted at the 3rd #eBPF workshop has been published! conferences.sigcomm.org/sigcomm/2025...
🐝🚀 Deadline Extended 🚀🐝
The submission deadline for the 2025 eBPF workshop at SIGCOMM has been extended!
New deadline: May 23rd.
Don't miss out! Submission link: ebpf25.hotcrp.com
The submission deadline for the 2025 eBPF workshop at SIGCOMM has been extended!
New deadline: May 23rd.
Don't miss out! Submission link: ebpf25.hotcrp.com
May 6, 2025 at 5:05 PM
🐝🚀 Deadline Extended 🚀🐝
The submission deadline for the 2025 eBPF workshop at SIGCOMM has been extended!
New deadline: May 23rd.
Don't miss out! Submission link: ebpf25.hotcrp.com
The submission deadline for the 2025 eBPF workshop at SIGCOMM has been extended!
New deadline: May 23rd.
Don't miss out! Submission link: ebpf25.hotcrp.com
With NSDI'25 coming to an end today, I've updated the list of #eBPF papers to include the three papers published at USENIX NSDI this year! pchaigno.github.io/bpf/2025/01/...
April 30, 2025 at 3:01 PM
With NSDI'25 coming to an end today, I've updated the list of #eBPF papers to include the three papers published at USENIX NSDI this year! pchaigno.github.io/bpf/2025/01/...
Ihor Solodrai started working on a visualization tool to help read #eBPF verifier logs! It shows the current verifier state at any point and tracks data dependencies. Hopefully, it'll make the logs less scary to newcomers!
Code: github.com/libbpf/bpfvv
Example: libbpf.github.io/bpfvv/?url=h...
Code: github.com/libbpf/bpfvv
Example: libbpf.github.io/bpfvv/?url=h...
April 1, 2025 at 3:00 PM
Ihor Solodrai started working on a visualization tool to help read #eBPF verifier logs! It shows the current verifier state at any point and tracks data dependencies. Hopefully, it'll make the logs less scary to newcomers!
Code: github.com/libbpf/bpfvv
Example: libbpf.github.io/bpfvv/?url=h...
Code: github.com/libbpf/bpfvv
Example: libbpf.github.io/bpfvv/?url=h...
📢 Call for Papers 📢
The CFP for the 2025 eBPF workshop is out!
📅 Deadline: May 8th
🔗 More info: conferences.sigcomm.org/sigcomm/2025...
Don't miss the chance to share your work with the eBPF 🐝community!
The CFP for the 2025 eBPF workshop is out!
📅 Deadline: May 8th
🔗 More info: conferences.sigcomm.org/sigcomm/2025...
Don't miss the chance to share your work with the eBPF 🐝community!
March 24, 2025 at 6:18 PM
📢 Call for Papers 📢
The CFP for the 2025 eBPF workshop is out!
📅 Deadline: May 8th
🔗 More info: conferences.sigcomm.org/sigcomm/2025...
Don't miss the chance to share your work with the eBPF 🐝community!
The CFP for the 2025 eBPF workshop is out!
📅 Deadline: May 8th
🔗 More info: conferences.sigcomm.org/sigcomm/2025...
Don't miss the chance to share your work with the eBPF 🐝community!
I'll give an introduction to #eBPF next week at the Rennes DevOps meetup!
I'll explain what it is concretely and the many use cases, from tracing to @cilium.io and more. I'll also try to address the many misconceptions around eBPF. Don't miss it if you're around and eBPF isn't yet all clear to you!
I'll explain what it is concretely and the many use cases, from tracing to @cilium.io and more. I'll also try to address the many misconceptions around eBPF. Don't miss it if you're around and eBPF isn't yet all clear to you!
🚀 Ne manquez pas notre prochain Meetup DevOps Rennes le 27 mars dans les locaux de MaxDS ! 🚀
📋 "Introduction à eBPF : Moderniser Linux pour le cloud" par @pchaigno.bsky.social
Places limitées, inscription obligatoire : 👉 www.meetup.com/fr-FR/rennes...
#DevOps #Rennes #eBPF #Linux #Sécurité
📋 "Introduction à eBPF : Moderniser Linux pour le cloud" par @pchaigno.bsky.social
Places limitées, inscription obligatoire : 👉 www.meetup.com/fr-FR/rennes...
#DevOps #Rennes #eBPF #Linux #Sécurité
March 19, 2025 at 9:34 AM
I'll give an introduction to #eBPF next week at the Rennes DevOps meetup!
I'll explain what it is concretely and the many use cases, from tracing to @cilium.io and more. I'll also try to address the many misconceptions around eBPF. Don't miss it if you're around and eBPF isn't yet all clear to you!
I'll explain what it is concretely and the many use cases, from tracing to @cilium.io and more. I'll also try to address the many misconceptions around eBPF. Don't miss it if you're around and eBPF isn't yet all clear to you!
It does not make sense to compare the performance of nftables and eBPF.
eBPF can take many different forms. Its performance will largely depend on its hook point, its maps, the algorithm its implementing. That's the point I tried to illustrate in pchaigno.github.io/ebpf/2020/09....
eBPF can take many different forms. Its performance will largely depend on its hook point, its maps, the algorithm its implementing. That's the point I tried to illustrate in pchaigno.github.io/ebpf/2020/09....
BPF Isn’t About Speed
This post benchmarks various approaches to filter egress traffic in the Linux kernel. It compares iptables, ipset, tc-bpf, and cgroup-bpf. It demonstrates how diverse aspects of the eBPF implementatio...
pchaigno.github.io
March 18, 2025 at 3:31 PM
It does not make sense to compare the performance of nftables and eBPF.
eBPF can take many different forms. Its performance will largely depend on its hook point, its maps, the algorithm its implementing. That's the point I tried to illustrate in pchaigno.github.io/ebpf/2020/09....
eBPF can take many different forms. Its performance will largely depend on its hook point, its maps, the algorithm its implementing. That's the point I tried to illustrate in pchaigno.github.io/ebpf/2020/09....
Reposted by Paul Chaignon
Recently, I have been busy exploring eBPF Arena — a new API that enables eBPF programs to allocate memory pages; similar functionality as mmap and munmap . I've written a blog post about it that I like to share with you: fshahinfar1.github.io/blog/04_ebpf...
eBPF Arena: A Tutorial
fshahinfar1.github.io
February 25, 2025 at 11:14 PM
Recently, I have been busy exploring eBPF Arena — a new API that enables eBPF programs to allocate memory pages; similar functionality as mmap and munmap . I've written a blog post about it that I like to share with you: fshahinfar1.github.io/blog/04_ebpf...
The report from this summer's Dagstuhl seminar on Programmable Host Networking has been published: doi.org/10.4230/DagR...! #ebpf #DPDK #DPU
February 21, 2025 at 3:31 PM
The report from this summer's Dagstuhl seminar on Programmable Host Networking has been published: doi.org/10.4230/DagR...! #ebpf #DPDK #DPU