Skip to content

Use eBPF RingBuffer instead of PerfEvent #96

@qjerome

Description

@qjerome

RingBuffer is a more modern and performant way to transmit information from kernel to user land.
So event forwarding could be implemented using it, the only issue is kernel compatibility. It is available only since kernel 5.8 so we cannot replace completely PerfEvent (because kunai currently support kernels back to 5.4).

Resources:
https://github.com/aya-rs/aya/blob/main/test/integration-test/src/tests/ring_buf.rs
https://github.com/aya-rs/aya/blob/main/test/integration-ebpf/src/ring_buf.rs

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions