How eBPF Intercepts Packets Before Kernel Routing
eBPF programs redirect packets at XDP or TC hooks before the kernel routing table is consulted, causing routing confusion when troubleshooting.
Tag: Network monitoring with eBPF
Capture Packets in OpenWRT With eBPF: What to Know First
For an openwrt packet capture on a small router, that split keeps the job honest: `tcpdump` gives Wireshark a standard capture, while eBPF trades full packet.
Use eBPF to Trace VPN Traffic Across Encryption
The right eBPF hooks expose plaintext on tun0 or wg0 and ciphertext on the NIC, with practical guidance on correlation, probes, and failure diagnosis.
OpenWrt Traffic Monitor: Read Raw Kernel Data First
Skip dashboards for unreliable counts. Start with /proc/net/dev and tc qdisc, then layer nlbwmon for per-IP accountability on OpenWrt routers.
Use eBPF in Home Lab Monitoring
If you want reliable home lab eBPF monitoring that mirrors production observability, you’re in the right place—we’ll show a practical approach that gives kernel-level visibility without changing every application. We use tools like Grafana Beyla and OpenTelemetry to surface network and app behavior directly from the linux kernel. That means quick wins: zero-code visibility for […]
Cilium eBPF Use Cases: Where It Earns Its Complexity
Cilium eBPF use cases include identity-based policy, service load balancing, and flow visibility, with clear limits for custom tooling and basic networking.