Understanding KFuncs in Linux eBPF

Understanding KFuncs in Linux eBPF

KFuncs v5.13 KFunc (Kernel Function) refers to functions in the kernel that are specially annotated and explicitly allowed to be called from eBPF programs. KFuncs complement traditional eBPF helper functions, providing a new way to achieve similar functionality. Formally, KFuncs are unstable. Unlike helper functions, KFuncs do not have a User Space Application Programming Interface … Read more

Dynamic Pointers in Linux eBPF

Dynamic Pointers in Linux eBPF

Dynamic Pointers in Linux eBPF Dynamic Pointers (Dynptrs) The term “dynptr” (dynamic pointer) is a concept within the Linux eBPF verifier. It is a pointer that carries additional metadata, allowing certain safety checks to be performed at runtime. This mechanism is particularly useful when it is difficult to statically prove the safety of operations. For … Read more