BPF Documentation¶
This directory contains documentation for the BPF (Berkeley PacketFilter) facility, with a focus on the extended BPF version (eBPF).
This kernel side documentation is still work in progress. The maintextual documentation is (for historical reasons) described inLinux Socket Filtering aka Berkeley Packet Filter (BPF), which describe both classical and extendedBPF instruction-set.The Cilium project also maintains aBPF and XDP Reference Guidethat goes into great technical depth about the BPF Architecture.
The primary info for the bpf syscall is available in theman-pagesforbpf(2).
BPF Type Format (BTF)¶
Frequently asked questions (FAQ)¶
Two sets of Questions and Answers (Q&A) are maintained.
Helper functions¶
- bpf-helpers(7) maintains a list of helpers available to eBPF programs.