eBPF

eBPF is a pure Go library that provides utilities for loading, compiling, and debugging eBPF programs. It has minimal external dependencies and is intended to be used in long running processes.

ebpf/asm contains a basic assembler.

An Important Note About Licenses:

The main part of this code is governed by an MIT license. However, the examples folder is a near straight port of the Linux eBPF samples folder, which makes that code governed by GPLv2, so be careful if you copy from it heavily as you are likely pinning yourself to GPLv2.

Further reading

• Linux documentation on BPF
• Cilium eBPF documentation (recommended)
• eBPF features by Linux version