eBPF has become a key technology in the cloud native ecosystem. It revolutionized the way the Linux kernel is extended as it’s now much easier to add functionality to the kernel. There is a huge variety of tools using eBPF for different purposes such as networking, security, observability, and others.

Unfortunately, all those tools have their own tooling for deploying and configuring the eBPF programs, as well as gathering and processing the data produced by them. This, for the developers of such tools, is duplicated (and useless) work and it makes collaboration between different parties more difficult.

In this talk, we’ll look at how the Inspektor Gadget project is trying to address this. We’ll deep dive into Inspektor Gadget as a framework that makes it easier to use eBPF in applications and infrastructure for systems data collection; ultimately enabling greater collaboration between different parties.