eBPF is a revolutionary technology that can run sandboxed programs in the Linux kernel without changing kernel source code or loading kernel modules.
eBPF-不只介绍,迅速上手-1
· 23 min read
Loadable kernel modules allow you to add codes to the Linux kernel while it is running.
These modules can do lots of things, especially device drivers, file system drivers and system calls.