eBPF Crash Course
Learn eBPF from the basics with hands-on concepts, tools, tracing, networking, and observability. Ideal for DevOps, SRE, cloud, and Linux engineers who want practical eBPF skills.
⏳ Time to complete: Approx. 1-2 hours
📋 Prerequisite: Basic Linux and Kubernetes Knowledge
🗒️ Type: Text-based With Diagrams, Screenshots, and Hands-On Projects
Welcome to the eBPF course!
This course will help you understand eBPF from the basics and see how it is used for networking, observability, and security in modern Linux and Kubernetes environments.
You'll learn important eBPF concepts including hooks, the verifier, JIT compilation, maps, helpers, BTF, and CO-RE through simple explanations and practical examples.
You'll also work on two hands-on projects:
- Build a simple eBPF security detector to understand how an eBPF program runs and captures system events.
- Secure Kubernetes traffic with Cilium and Hubble using L3/L4 and L7 network policies while observing allowed and denied traffic.
By the end of this course, you'll understand how the major eBPF components work together and how eBPF is used in real-world DevOps, SRE, cloud, Kubernetes, networking, and security environments.
No previous eBPF programming experience is required.
Let's get started!