BPF Documentation

This directory contains documentation for the BPF (Berkeley Packet Filter) facility, with a focus on the extended BPF version (eBPF).

This kernel side documentation is still work in progress. The Cilium project also maintains a BPF and XDP Reference Guide that goes into great technical depth about the BPF Architecture.

• eBPF verifier
• libbpf
• BPF Standardization
• BPF Type Format (BTF)
• Frequently asked questions (FAQ)
• Syscall API
• Helper functions
• BPF Kernel Functions (kfuncs)
• BPF cpumask kfuncs
• BPF filesystem kfuncs
• Program Types
• BPF maps
• Running BPF programs from userspace
• Classic BPF vs eBPF
• BPF Iterators
• BPF licensing
• Testing and debugging BPF
• 1 Clang implementation notes
• 1 Linux implementation notes
• Other
• Redirect