Bpftop: Streamlining eBPF performance optimization
netflixtechblog.com
Bpftop: Streamlining eBPF performance optimization
1–10 of 22 posts
Re: Bpftop: Streamlining eBPF performance optimization
#2Looks great. I remember using bpftrace at work to debug a nasty performance issue, I went down the rabbit hole only to find a certain syscall was being called much too often. We managed to trace it back inside the sourcecode to a sleep(1 second), which was some sort of manual io scheduling commited by the CTO when the startup was early stage.
Removing those few lines and installing kyber fixed the issues!
Re: Bpftop: Streamlining eBPF performance optimization
#3I find this somewhat amusing given one of the primary use cases of eBPF is measuring performance
Re: Bpftop: Streamlining eBPF performance optimization
#4I find this somewhat amusing given one of the primary use cases of eBPF is measuring performance
Who watches the Watchmen?
Re: Bpftop: Streamlining eBPF performance optimization
#5I find this somewhat amusing given one of the primary use cases of eBPF is measuring performance
There's plenty other applications.
Network routing can be implemented in (e)bpf. It's even the original use case.
But there's also the LSM based on ebpf, there's a user space scheduler (Google iirc), seccomp and some cgroup filters can be done in bpf...
It's the Lua of the kernel at this point. Provides a lot of extension points.
Re: Bpftop: Streamlining eBPF performance optimization
#6I find this somewhat amusing given one of the primary use cases of eBPF is measuring performance
There's plenty other applications. Network routing can be implemented in (e)bpf. It's even the original use case. But there's also the LSM based on ebpf, there's a user space scheduler (Google iirc), seccomp and some cgroup filters can be done in bpf... It's the Lua of the kernel at this point. Provides a lot of extension points.
sched-ext is meta, Google have something else but less open i believe.
Re: Bpftop: Streamlining eBPF performance optimization
#7Just tried this on the eBPF code I am working on. Works great! This one is going straight into the toolbox.
Even though eBPF is super fast, I have found triggering complex probes many times will have performance implications, which can not easily be tracked down to the instrumenting application. This will help with that a lot.
Re: Bpftop: Streamlining eBPF performance optimization
#8What use cases people use eBPF for these days?
Re: Bpftop: Streamlining eBPF performance optimization
#9What use cases people use eBPF for these days?
The eBPF website has a list of projects using it, that can give you a decent flavour of what people use it for. https://ebpf.io/applications/
Re: Bpftop: Streamlining eBPF performance optimization
#10What use cases people use eBPF for these days?
Tongue in cheek: lots of people have discovered they can replace Linux kernel modules with brittle eBPF code instead, which attaches itself to various parts of the kernel that are even less stable than the things modules have to deal with.