Linux eBPF Systems Engineering

Transform your understanding of Linux systems engineering with *Linux eBPF Systems Engineering*. This definitive technical guide explores how extended Berkeley Packet Filter (eBPF) turns the Linux kernel into a programmable, event-driven runtime engine without modifying kernel source code or loading risk-prone kernel modules. Discover the mechanics of the 64-bit eBPF virtual machine, in-kernel static verifier safety checks, BPF Type Format (BTF), and Compile Once - Run Everywhere (CO-RE) portability. Packed with production-grade C code, driver-level packet parsing with XDP, observability tracing with kprobes and tracepoints, zero-trust security enforcement via eBPF LSM, and user-space application development using `libbpf` and `bpftool`, this book equips systems programmers, cloud architects, and security engineers to build next-generation infrastructure platforms.