v0.2.0
Golang based SDK for kernel eBPF operations i.e, load/attach/detach eBPF programs and create/delete/update maps. SDK relies on Unix bpf() system calls.
SDK currently supports -
- eBPF program types -
a. Traffic Classifiers
b. XDP
c. Kprobes/Kretprobes
d. Tracepoint probes - Ring buffer
SDK currently do not support -
- Map in Map
- Perf buffer
Note: This is the first version of SDK and interface is subject to change so kindly review the release notes before upgrading.