Bill Mulligan 🐝🐝🐝

Meta switched to a custom scheduler with eBPF which delivered 🐝 3.28 megawatts of power savings +1.1% on weighted-ads-ranked 28% reduction in service p99 latency 60% reduction in service p99 latency 18% reduction in timeout errors on the critical path engineering.fb.com/2026/07/13/m...

"Cillium is like gravity: every time I come across some networking related technology I want to play with, Cillium has an implementation." social.treehouse.systems/@juliancalab...

eBPF on cars? Now you CAN

First stop on the eBPF World Tour was Vienna for IETF and eBPF Vienna Meetup 🐝 From someone not coming from a traditional IT background and now be speaking at IETF was a big honor for me. I guess you never know how much your life can change in a decade.

"IMO the maintenance burden of eBPF programs is much much lighter than out-of-tree kernel modules, with the safety guarantee offered by the verifier at the same time."

An eBPF-based virtual network dataplane and control plane, written in Rust. Most understanding of eBPF-based networking comes from reading about systems like Cilium rather than building one. Sarena exists to close that gap directly.

I'll be speaking at IETF in Vienna tomorrow. Since RFC 9669: BPF ISA was published in 2024 a lot has happen and I'll be giving the eBPF ecosystem updates. On a personal note, I still remember when I first heard about IETF in my masters. 9 years later, I'm the one giving the speech 🤯

From eBPF podcasts to local meetups and conference talks to hands-on coding labs Teodor Podobnik really covered a lot in his Community & Advocacy Fellowship from eBPF Foundation 🐝 Look for applications to open again in the fall 👀

Cloudflare's case study with the eBPF Foundation is just the teaser for the 8 part blog series we have coming with them. It will cover why Cloudflare bet on eBPF as a platform rather than a collection of point solutions Coming soon ™️

Looks like hello-ebpf, the Java library for eBPF just got a new homepage and docs ☕ 🐝

eBPF Foundation is launching the eBPF Company Landscape and we need your help to fill it! Our goal is to track all of the companies leveraging eBPF in their products to show how widely it is used and help end users understand what their vendor choices are 🐝 ebpf.foundation/unveiling-th...

Nicolas and team are back at it again. Let them know what is bogging down your cluster networking and help us settle the bet if Gateway API, VMs, or AI use cases will be the most important in the survey this year 🗒️

Looking at Cong Wang's analysis of the eBPF ecosystem, everything from lines of code to projects on Github to mailing list activity to kfuncs to academic publications and citations is up and to the right 📈 Twelve years in and I feel like we are just getting started

“The biggest value for us is that Cilium simply works, and works well,” said Pons. “With our previous CNIs, failures were painful and hard to resolve. Now we know that once Cilium is deployed, it will work. That reliability is genuinely valuable.” - From Michelin

From AI/GPU neoclouds to hyperscalers to sovereign European clouds and major Kubernetes distributions, everyone is on Cilium Which of our collectable cards in your favorite and should we make a sticker book for next KubeCon?

eBPF-based service dependency mapper for Kubernetes. Builds an accurate topology even through Envoy edge proxies by resolving HTTP Host headers instead of proxy IPs — no sidecars, no instrumentation. Written in Rust, queryable via MCP From Yash Nandwana

Tom Gillis is always talking about how Cisco is turning into a platform company. You buy into the networking and now you get the security along side it too. Where I'm seeing that on the Isovalent side is turning our eBPF kernel engineering into enterprise workflows through Cisco Cloud Control.

Write eBPF programs in Ruby 💎 A partition + codegen layer over matz/spinel that compiles eBPF-eligible methods to .bpf.c and keeps the rest native C, with transparent dispatch.

"eBPF can unlock new pathways towards efficient power management in modern server systems" As we talk about compute in terms of Gigawatt datacenter, this is just one more way that eBPF is helping with the most pressing demands we are placing on our technology stack

A userspace eBPF VM written in Go gBPF tries to ease the validation and testing of eBPF programs by providing control over the input and output memory as well as mimicking the different helpers leveraged when writing eBPF programs.

Isovalent is a company of kernel engineers, not CSS majors. When I thought about how investors valued us, I would say it was mainly based on our kernel expertise with enterprise workflows starting to be built in I've put X marks on where I think other startups in the eBPF space land, any guesses?

eBPF based companies capture value by building a technical moat in the kernel and delivering enterprise workflows in user space. When evaluating a pitch deck claiming eBPF capabilities, carefully consider how the founding team is capturing customer value in both kernel space and user space.

Of the five key take away at the top of this conversation from Daniel Finneran and Olimpiu Pop this is my favorite: "While eBPF is famous for networking (Cilium), its true power lies in observability and enforcement across any syscall.

I've long thought eBPF would be critical for security in the AI era. Paul Arah did a great job capturing how it will help both sandbox AI workloads and defend against AI assisted attacks 🐝

With Meta running an average of 180 eBPF programs per server, ensuring that they don't conflict with one another is critical to avoid This tutorial is the deep dive into what Meta has learned building and running safe multi-program eBPF environments

"The companies that own that kernel layer and build upward into analytics, policy management, and workflow integration are structurally positioned to displace incumbents who cannot replicate kernel-level access through any amount of engineering effort."

A tool for measuring and visualizing end-to-end latency in distributed trading systems using eBPF and flame graphs

eBPF Runtime Reporter and Profiler

This is a hand-written eBPF tool tree. The eBPF programs are assembly source files. The build is plain make.

eBPF-based system health and security observability for Automotive Grade Linux A Rust kernel probe suite and daemon streaming live CPU, memory, scheduler, block, network, per-cgroup bandwidth, and security-syscall telemetry to a Flutter dashboard over memory and D-Bus

Build a custom Linux kernel with a full eBPF feature set (BTF, struct_ops/sched_ext, tracing, netem, BPF LSM, AF_XDP) and run it under Apple's container runtime on Apple Silicon macOS

Per-pod Kubernetes network cost, by AWS billing path. An eBPF agent that attributes every byte to the pod paying for it, and gets cross-AZ right

eBee have been one of the core representations of Isovalent's culture Raphaël Pinson did a great write up of his journey to producing them at scale with AI. I think it is also a lesson on where the industry is going overall, from handcrafted work to declarative workflows.

"Cilium provides the network substrate and CiliumNetworkPolicy restricts which agent identities may reach which MCP server. The combination (cert-manager + agent-level mTLS + CiliumNetworkPolicy) is materially simpler than a service mesh."

eBPF probes CPython frame execution and returns early for unprotected processes

An independent runtime safety layer for AI-driven robots — keeps the robot inside its approved limits no matter what the AI outputs, and records evidence it never left From Mehmet Cenk Ayberkin

eBPF tooling to implement RFC 3514 - the "evil bit" in the IPv4 header

eBPF-based USB subsystem tracer and diagnostic tool for Linux BSP