--- title: Best eBPF posts — October 2024 | daily.dev description: The most upvoted eBPF posts from October 2024, curated by the daily.dev community. canonical: https://daily.dev/sources/ebpf/best-of/2024/10 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/sources/ebpf/best-of/2024/10 og:type: website og:site_name: daily.dev og:title: Best eBPF posts — October 2024 | daily.dev og:description: The most upvoted eBPF posts from October 2024, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of eBPF — October 2024 1. 1 [](https://daily.dev/posts/what-is-ebpf-a-beginner-s-guide-to-kernel-level-observability-and-tra-j992io2ou "What is eBPF? A Beginner’s Guide to Kernel-Level Observability and Tra") Article eBPF · 2y What is eBPF? A Beginner’s Guide to Kernel-Level Observability and Tra eBPF allows developers to dynamically load custom code into the Linux kernel, enhancing capabilities for observability, tracing, and security without modifying the kernel itself. By distinguishing between kernel space and user space, the post underscores the advantages of running code with kernel-level privileges. It explores various methods for executing custom logic in the kernel, including Kernel Modules, adding programs via a kernel patch, using Kernel Hooks, employing System Tap and DTrace, and leveraging eBPF. eBPF stands out for its efficiency, security, and support for high-level languages. 14 2. 2 [](https://daily.dev/posts/a-beginner-s-guide-to-ebpf-how-programs-run-monitor-and-share-data--qlstln6hq "A Beginner’s Guide to eBPF: How Programs Run, Monitor, and Share Data.") Article eBPF · 2y A Beginner’s Guide to eBPF: How Programs Run, Monitor, and Share Data. eBPF programs execute in the kernel space, often triggered by kernel events like system calls or network socket actions. They can be used for monitoring, logging, and filtering tasks among others. eBPF programs typically share data with user space through structures like BPF maps and ring buffers. The post provides a simple Python-based example to illustrate these concepts. 14 3. 3 [](https://daily.dev/posts/can-ebpf-detect-redis-message-patterns-before-they-become-problems--6dvmyexly "Can eBPF Detect Redis Message Patterns Before They Become Problems?") Article eBPF · 2y Can eBPF Detect Redis Message Patterns Before They Become Problems? Redis, a popular in-memory key-value store, faces performance issues like memory exhaustion and CPU spikes. Active monitoring is essential to address these challenges effectively. eBPF can be used to trace Redis operations at the syscall level, providing granular insights into each Redis command. This reduces latency and CPU spikes by allowing better isolation and debugging of issues. Tests show that eBPF adds minimal overhead to system performance, offering a valuable trade-off for the detailed observability it provides. 11 [See all eBPF archives](/sources/ebpf/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/sources/ebpf/best-of/2024/10#page","url":"https://daily.dev/sources/ebpf/best-of/2024/10","name":"Best eBPF Posts — October 2024","description":"The most upvoted eBPF posts from October 2024, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/sources/ebpf/best-of/2024/10#items","numberOfItems":3,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/what-is-ebpf-a-beginner-s-guide-to-kernel-level-observability-and-tra-j992io2ou","name":"What is eBPF? A Beginner’s Guide to Kernel-Level Observability and Tra"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/a-beginner-s-guide-to-ebpf-how-programs-run-monitor-and-share-data--qlstln6hq","name":"A Beginner’s Guide to eBPF: How Programs Run, Monitor, and Share Data."},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/can-ebpf-detect-redis-message-patterns-before-they-become-problems--6dvmyexly","name":"Can eBPF Detect Redis Message Patterns Before They Become Problems?"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sources","item":"https://daily.dev/sources"},{"@type":"ListItem","position":3,"name":"eBPF","item":"https://daily.dev/sources/ebpf"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/sources/ebpf/best-of"},{"@type":"ListItem","position":5,"name":"October 2024"}]}]} ```