Building Bulletproof eBPF Programs

Here is a claim that might sound a bit reckless on the surface: a kernel-level program can be loaded into the running OS kernel, on a production server, under live traffic, and the kernel carries a guarantee that program cannot crash the machine. Not that it probably will not crash. That it cannot . Netflix uses code like this to watch every disk request on live systems. Cloudflare uses it to drop…