BPF Documentation

This directory contains documentation for the BPF (Berkeley Packet Filter) facility, with a focus on the extended BPF version (eBPF).

This kernel side documentation is still work in progress. The Cilium project also maintains a BPF and XDP Reference Guide that goes into great technical depth about the BPF Architecture.

• 1 eBPF Instruction Set Specification, v1.0
• eBPF verifier
• libbpf
• BPF Type Format (BTF)
• Frequently asked questions (FAQ)
• Syscall API
• Helper functions
• BPF Kernel Functions (kfuncs)
• Program Types
• eBPF maps
• Running BPF programs from userspace
• Classic BPF vs eBPF
• BPF licensing
• Testing and debugging BPF
• 1 Clang implementation notes
• 1 Linux implementation notes
• Other