Tips and Tricks for Writing Linux BPF Applications with libbpf

• bcc

  71 19,404 9.2 C

  BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

  

At the beginning of 2020, when I used the BCC tools to analyze our database performance bottlenecks, and pulled the code from the GitHub, I accidentally discovered that there was an additional libbpf-tools directory in the BCC project. I had read an article on BPF portability and another on BCC to libbpf conversion, and I used what I learned to convert my previously submitted bcc-tools to libbpf-tools. I ended up converting nearly 20 tools. (See Why We Switched from bcc-tools to libbpf-tools for BPF Performance Analysis.)

• libbpf-bootstrap

  1 0 7.5 C

  Scaffolding for BPF application development with libbpf and BPF CO-RE (by ethercflow)

You can see the complete code in hardirqs.bpf.c (built with libbpf-bootstrap).

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• libbpf

  5 1,942 9.5 C

  Automated upstream mirror for libbpf stand-alone build.

  

Starting in v0.2, libbpf supports multiple entry-point BPF programs within the same executable and linkable format (ELF) section. Therefore, you can attach multiple BPF programs to the same event (such as tracepoints or kprobes) without worrying about ELF section name clashes. For details, see Add libbpf full support for BPF-to-BPF calls. Now, you can naturally define multiple handlers for an event like this:

• linux

  980 170,074 10.0 C

  Linux kernel source tree

This article introduced some tips for writing BPF programs with libbpf. You can find many practical examples from libbpf-tools and bpf. If you have any questions, you can join the TiDB community on Slack and send us your feedback.

Suggest a related project