eBPF Architecture

eBPF Architecture An architecture diagram generated by Archify. eBPF Program · C/Rust source · User Space eBPF Program C/Rust source libbpf / BCC · Loader · User Space libbpf / BCC Loader Application · User-space process · User Space Application User-space process eBPF Verifier · Safety verification · Kernel Space eBPF Verifier Safety verification JIT Compiler · Native code translation · Kernel Space JIT Compiler Native code translation eBPF VM · Program execution · Kernel Space eBPF VM Program execution BPF Maps · State store · Kernel Space BPF Maps State store XDP · Network driver · Kernel Space › Hook Points XDP Network driver TC · Traffic Control · Kernel Space › Hook Points TC Traffic Control Socket Ops · Socket level · Kernel Space › Hook Points Socket Ops Socket level Kprobes · Kernel function tracing · Kernel Space › Hook Points Kprobes Kernel function tracing bpf() load Valid read / write shared state User Space Kernel Space Hook Points Legend User-space components Kernel components State store Safety verification