{"product_id":"ebpf-in-practice-zak-illman-9798242602502","title":"eBPF in Practice: From Linux Kernel Internals to Cloud-Native Observability, Networking, and Security","description":"\u003cb\u003eBook Title: eBPF in Practice\u003c\/b\u003e\u003cbr\u003e\u003cb\u003eSubtitle: From Linux Kernel Internals to Cloud-Native Observability, Networking, and Security\u003c\/b\u003e\u003cbr\u003eUnlock the full power of the Linux kernel with \u003cb\u003eeBPF in Practice\u003c\/b\u003e, the definitive, production-focused guide to extended Berkeley Packet Filter (eBPF) for modern engineers. Designed for developers, SREs, DevOps professionals, platform engineers, and security practitioners, this book takes you from foundational kernel concepts to real-world, cloud-native eBPF deployments used at scale.\u003cbr\u003eLinux has evolved-but traditional tools like strace, perf, and static probes can no longer keep up with containers, Kubernetes, and high-performance networking. \u003cb\u003eeBPF in Practice\u003c\/b\u003e shows you how eBPF fundamentally changes the game by enabling \u003cb\u003esafe, high-performance, programmable kernel instrumentation\u003c\/b\u003e without kernel recompilation or system restarts.\u003cbr\u003eStarting with a clear explanation of why eBPF changed Linux forever, the book methodically builds your understanding of eBPF architecture, execution models, verifier mechanics, and JIT compilation. You'll learn how eBPF programs are safely loaded, verified, and executed inside the kernel-and how to debug verifier errors with confidence.\u003cbr\u003eThis book goes far beyond theory. You'll write and load real eBPF programs, explore \u003cb\u003emaps, memory constraints, per-CPU data structures, and ring buffers\u003c\/b\u003e, and understand the critical performance trade-offs required for production systems. Dedicated chapters walk you through \u003cb\u003eCO-RE (Compile Once, Run Everywhere) \u003c\/b\u003eand \u003cb\u003eBTF\u003c\/b\u003e, solving the kernel version compatibility problem that blocks many teams from adopting eBPF at scale.\u003cbr\u003eObservability is a major focus. You'll learn how to build \u003cb\u003elow-overhead tracing, profiling, metrics, logs, and distributed tracing pipelines \u003c\/b\u003eusing eBPF-even in containerized and Kubernetes environments. Real-world debugging scenarios demonstrate how eBPF is used in production to diagnose latency spikes, performance regressions, and elusive kernel-level issues.\u003cbr\u003eNetworking engineers will gain deep insight into \u003cb\u003eXDP, traffic control (TC), and cloud-native networking\u003c\/b\u003e, including how eBPF powers modern CNIs like Cilium. Security professionals will learn how to implement \u003cb\u003ekernel-level runtime security\u003c\/b\u003e, syscall monitoring, behavioral detection, and container isolation-while managing false positives and operational risk.\u003cbr\u003eFinally, \u003cb\u003eeBPF in Practice\u003c\/b\u003e prepares you for real-world operations. You'll understand performance overhead, failure modes, recovery strategies, user-space eBPF patterns, and emerging trends such as \u003cb\u003eAI\/ML-driven policy engines and automation\u003c\/b\u003e. The book concludes with guidance on building an eBPF practice and advancing your career in one of the fastest-growing areas of Linux and cloud engineering.\u003cbr\u003e\u003cb\u003eWhat you'll learn: \u003c\/b\u003e\u003cul\u003e\n\u003cli\u003eeBPF architecture, verifier internals, and execution constraints\u003c\/li\u003e\n\u003cli\u003eWriting, loading, and debugging eBPF programs (C, Go, Python)\u003c\/li\u003e\n\u003cli\u003eHigh-performance observability, networking, and security use cases\u003c\/li\u003e\n\u003cli\u003eCO-RE, BTF, and portable eBPF deployment strategies\u003c\/li\u003e\n\u003cli\u003eOperating eBPF safely and efficiently in production\u003c\/li\u003e\n\u003c\/ul\u003eIf you want to master \u003cb\u003eLinux kernel observability\u003c\/b\u003e, \u003cb\u003ecloud-native networking, and runtime security \u003c\/b\u003eusing the same techniques adopted by hyperscalers and leading open-source projects, \u003cb\u003eeBPF in Practice \u003c\/b\u003eis your essential, future-proof guide.\u003cbr\u003e\u003cbr\u003e\u003cb\u003eAuthor:\u003c\/b\u003e Zak Illman\u003cbr\u003e\u003cb\u003eISBN-13:\u003c\/b\u003e 9798242602502\u003cbr\u003e\u003cb\u003ePublisher:\u003c\/b\u003e Independently Published\u003cbr\u003e\u003cb\u003eLanguage:\u003c\/b\u003e English\u003cbr\u003e\u003cb\u003ePublished:\u003c\/b\u003e 01\/04\/2026\u003cbr\u003e\u003cb\u003ePages:\u003c\/b\u003e 254\u003cbr\u003e\u003cb\u003eFormat:\u003c\/b\u003e Paperback\u003cbr\u003e\u003cb\u003eWeight:\u003c\/b\u003e 1.31lbs\u003cbr\u003e\u003cb\u003eSize:\u003c\/b\u003e 11.00h x 8.50w x 0.53d","brand":"Zak Illman","offers":[{"title":"Paperback","offer_id":49083942371583,"sku":"9798242602502","price":25.0,"currency_code":"USD","in_stock":true}],"url":"https:\/\/www.whiterainbookhouse.com\/products\/ebpf-in-practice-zak-illman-9798242602502","provider":"WR Book House","version":"1.0","type":"link"}