Using BPF to debug your Kubernetes application
05-18, 10:00–10:30 (UTC), Main Hall

I will demo how to use different BPF tools in the Kubernetes developer workflow. Then, I will explain how it works and what support it requires from the Kubernetes installation.


BPF tools for tracing your Linux system is an area with a lot of developments. This has happened in the bcc project and in bpftrace project. Until recently, bcc and bpftrace were designed to trace one Linux system. This is changing with kubectl-trace, a tool adapting bpftrace for the Kubernetes workflow.

I’ll present how to use kubectl-trace to trace a Kubernetes pod. I will also present new tools based on bcc to trace syscalls or files opened by a specific pod. Finally, I will explain how it works and what support it requires from the Kubernetes installation.

Slides: https://tinyurl.com/rejekts-bpf-kubernetes

Originally from France, Alban currently lives in Berlin where he is a CTO & co-founder at Kinvolk. He is a contributor to rkt, a container runtime for Linux, Weave Scope, a container visualization & monitoring tool, and is actively working on BPF-related projects. Before falling into containers, Alban worked on various projects core to modern Linux; kernel IPC and storage, dbus performance and security, etc. His current technical interests revolve around networking, security, systemd and containers at the lower-levels of the system. Alban previously gave talks at several conferences including FOSDEM, Linux Plumbers, IO Visor Summit, Kubecons and LinuxCons.