Yogesh Bhalchandra Babar
Yogesh Babar is a Senior Principal Technical Support Engineer at Red Hat with 15 years of experience in the Linux kernel and enterprise systems. He specializes in low-level troubleshooting, performance tuning, and the Linux boot process.
A regular speaker at open-source conferences, Yogesh also conducts hands-on OS workshops and is the author of 'Hands-on Booting' booking. He runs an educational YouTube channel and is currently working on an autonomous-vehicle project, reflecting his interest in robotics and embedded systems.
Red Hat
SPTSE
Session
eBPF (extended Berkeley Packet Filter) is revolutionizing how we approach Linux kernel tooling, offering unprecedented access to kernel functions and data while maintaining safety and high performance. This session provides a practical deep dive into how modern applications can leverage eBPF to solve critical, long-standing challenges in both system security and application performance. We will begin with a clear explanation of the eBPF paradigm—the kernel's safe, sandboxed virtual machine—and its key components.
We will then explore two major use cases:
Security Enhancement: Demonstrating how eBPF can enforce granular, real-time security policies by implementing custom system call blocking and filtering mechanisms, effectively sandboxing processes directly within the kernel.
Performance Optimization: Analyzing a common system bottleneck (e.g., memory latency, inefficient I/O, or custom tracing) and showing how eBPF programs can be attached to kernel probes to provide deep, low-overhead observability and optimization opportunities that are impossible with traditional user-space tooling.
Attendees will leave with a solid understanding of eBPF's capabilities, its minimal performance footprint, and a framework for applying this powerful technology to their own performance and security requirements.