hub / github.com/DataDog/ebpf-manager
github.com/DataDog/ebpf-manager @v0.7.18
Chat with this repo
479 symbols
1,112 edges
97 files
210 documented · 44%
1 cross-repo links
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
eBPF Manager
This repository implements a manager on top of Cilium's eBPF library. This declarative manager simplifies attaching and detaching eBPF programs by controlling their entire life cycle. It was built with the intention of unifying how eBPF is used in large scale projects such as the Datadog Agent. By using the same declarative conventions, multiple teams can quickly collaborate on complex eBPF programs by sharing maps, programs or even hook points without having to worry about the setup of complex program types.
Requirements
- A version of Go that is supported by upstream
- Linux 4.4+ (some eBPF features are only available on newer kernel versions, see eBPF features by Linux version)
Getting started
You can find many examples using the manager in examples/. For a real world use case, check out the Datadog Agent.
Useful resources
- Cilium eBPF library
- Cilium eBPF documentation
- Linux documentation on BPF
- eBPF features by Linux version
License
- Unless explicitly specified otherwise, the golang code in this repository is under the MIT License.
- The eBPF programs are under the GPL v2 License.
Extension points exported contracts — how you extend this code
ProbesSelector (Interface)
ProbesSelector - A probe selector defines how a probe (or a group of probes) should be activated. For example, this can [4 …
selectors.go
FunctionExcluder (Interface)
FunctionExcluder - An interface for types that can be used for `AdditionalExcludedFunctionCollector`
manager.go
InstructionPatcherFunc (FuncType)
InstructionPatcherFunc - A function that patches the instructions of a program
manager.go
Core symbols most depended-on inside this repo
Shape
Languages
Go76%
C15%
C++9%
Modules by API surface
manager.go59 symbols
examples/include/bpf_helper_defs.h37 symbols
probe.go30 symbols
selectors.go23 symbols
tracefs.go16 symbols
netlink.go13 symbols
perfmap.go12 symbols
perf_event.go12 symbols
tc.go11 symbols
ringbuffer.go9 symbols
map.go8 symbols
socket.go7 symbols
Used by 1 indexed graphs manifest dependencies, hub-wide
For agents
$ claude mcp add ebpf-manager \
-- python -m otcore.mcp_server <graph>