ebpf eBPF 101: Your First Step into Kernel Programming eBPF has revolutionized Linux observability and security by allowing sandboxed programs to run in the kernel without changing kernel source code or loading modules