For a while, I鈥檝e been following stuff around eBPF, and it is very promising. What I just wrote is an understatement. At first glance, eBPF is bringing many new possibilities to our toolbox. You can start with performance profiling, tracing, security, networking, etc. But let鈥檚 start from the beginning.
By the way, I鈥檓 doing this on OSX. For eBPF, you need Linux kernel 4.1 or newer. So, I鈥檒l be running some VMs. This setup should be doable on Linux too. Code is available here.