eBPF
A pure Go library for loading, compiling, debugging, and attaching eBPF programs to Linux kernel hooks.
What is eBPF?
ebpf-go is a pure Go library for working with eBPF (extended Berkeley Packet Filter) programs. It provides utilities for loading, compiling, debugging, and attaching eBPF programs to various hooks in the Linux kernel, enabling developers to build low-level observability, networking, and security tools directly in Go.
Go developers and system engineers who need to interact with eBPF for observability, networking, or security applications, particularly those building long-running processes that require minimal external dependencies.
Developers choose ebpf-go because it offers a pure Go implementation with minimal dependencies, making it easy to integrate into existing Go projects. It provides comprehensive eBPF functionality, including compilation, assembly, and kernel attachment, without requiring external tools or complex setups.
Overview
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
Use Cases
Best For
- Building observability tools that trace kernel-level events
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
