BPF Performance Tools (Addison-Wesley Professional Computing Series)

BPF Performance Tools (Addison-Wesley Professional Computing Series)

  • Downloads:5007
  • Type:Epub+TxT+PDF+Mobi
  • Create Date:2021-03-12 03:17:36
  • Update Date:2025-09-07
  • Status:finish
  • Author:Brendan Gregg
  • ISBN:B081ZDXNL3
  • Environment:PC/Android/iPhone/iPad/Kindle

Summary

BPF and related observability tools give software professionals unprecedented visibility into software, helping them analyze operating system and application performance, troubleshoot code, and strengthen security。 BPF Performance Tools: Linux System and Application Observability is the industry’s most comprehensive guide to using these tools for observability。 Brendan Gregg, author of the industry’s definitive guide to system performance, introduces powerful new methods and tools for doing analysis that leads to more robust, reliable, and safer code。 
This authoritative guide: Explores a wide spectrum of software and hardware targets Thoroughly covers open source BPF tools from the Linux Foundation iovisor project’s bcc and bpftrace repositories Summarizes performance engineering and kernel internals you need to understand Provides and discusses 150+ bpftrace tools, including 80 written specifically for this book: tools you can run as-is, without programming — or customize and develop further, using diverse interfaces and the bpftrace front-end You’ll learn how to use BPF (eBPF) tracing tools to analyze CPUs, memory, disks, file systems, networking, languages, applications, containers, hypervisors, security, and the Linux kernel。 You’ll move from basic to advanced tools and techniques, producing new metrics, stack traces, custom latency histograms, and more。 It’s like having a superpower: with Gregg’s guidance and tools, you can analyze virtually everything that impacts system performance, so you can improve virtually any Linux operating system or application。

Download

Reviews

Rafael Gonzaga

This is really a manual of how eBPF works。 I would say that is dense enough to read the entire book in a row。 Whenever I need some specific use case around eBPF, I check sections of this book。

Paul Floyd

Very good, but I wish he could have avoided repeated use of the word 'technology' (that is in an American accent, tek-NAAAH-l-AAH-gee。 Thats probably the consequence of spending too much time in meetings with clueless and totally useless middle management。Otherwise technically spot on。 Very good, but I wish he could have avoided repeated use of the word 'technology' (that is in an American accent, tek-NAAAH-l-AAH-gee。 Thats probably the consequence of spending too much time in meetings with clueless and totally useless middle management。Otherwise technically spot on。 。。。more

Saran Sivashanmugam

The new BPF (or commercially known as eBPF) is the Functions-as-a-Service (FaaS) module of the Linux kernel。 BPF now makes virtually any language programmer as a Linux kernel developer。 The BPF community had done an excellent work in pushing this to upstream。 The opportunities are now plenty。 Brendan has just scratched the surface in this book showing the prowess of BPF in the performance world。 Brendan has contributed so much tools just for this book, BPF Trace and BCC。This book is cleanly orga The new BPF (or commercially known as eBPF) is the Functions-as-a-Service (FaaS) module of the Linux kernel。 BPF now makes virtually any language programmer as a Linux kernel developer。 The BPF community had done an excellent work in pushing this to upstream。 The opportunities are now plenty。 Brendan has just scratched the surface in this book showing the prowess of BPF in the performance world。 Brendan has contributed so much tools just for this book, BPF Trace and BCC。This book is cleanly organized showing Linux internals, traditional Linux performance tools and BPF tools。 Brendan shows numerous examples of the command results and explaining the important part of the output that one may need to pay attention to。BPF is a relatively new area in Linux world and there's no one book that can cover everything that BPF has to offer。This book is a great start from performance aspect and I'm pretty sure there's lot to come。 。。。more

Nick

A great introduction to BPF, though the book assumes some familiarity with the Linux kernel。Deducting one star because of the numerous typos and spelling mistakes in the book, which are distracting。

Adelbert

Exactly what I was looking for in a BPF book。 If you're new to tracing this book is very beginner friendly in that regard, but does expect some background in understanding how operating systems work。 The book primarily focuses on the tracing use cases of BPF, as opposed to the packet filtering or security use cases。 It is a very large book, but most of it is intended primarily as a reference。 The first 150 or so pages provide background and the rest of the book is intended to be read as-needed, Exactly what I was looking for in a BPF book。 If you're new to tracing this book is very beginner friendly in that regard, but does expect some background in understanding how operating systems work。 The book primarily focuses on the tracing use cases of BPF, as opposed to the packet filtering or security use cases。 It is a very large book, but most of it is intended primarily as a reference。 The first 150 or so pages provide background and the rest of the book is intended to be read as-needed, e。g。 when debugging a memory leak。 The last couple chapters give some helpful tips and tricks and helped me debug an issue when I was tracing some Rust code。 Very beg 。。。more

Simon Eskildsen

Gregg's previous book, Systems Performance, manages to both be an excellent book on operating systems and observability tooling。 If he wrote Systems Performance today, it'd use BPF-tools instead, which frankly would make it _the_ book。 For now, you'll have to read both -- and read Systems Performance first。I see this book as an amendment to Systems Performance with "hey, we have BPF now, it's mega-powerful, and you should use that instead of system tap / whatever。" It explains what BPF is: Final Gregg's previous book, Systems Performance, manages to both be an excellent book on operating systems and observability tooling。 If he wrote Systems Performance today, it'd use BPF-tools instead, which frankly would make it _the_ book。 For now, you'll have to read both -- and read Systems Performance first。I see this book as an amendment to Systems Performance with "hey, we have BPF now, it's mega-powerful, and you should use that instead of system tap / whatever。" It explains what BPF is: Finally we have a way to run user-code in the mainline kernel, which can aggregate whatever metrics we like with minimal overhead。He explains the different types of probes, how BCC and bpftrace add value on top of BPF, and techniques for efficiently using it。 I think the level of detail here was great。 The rest of the book is essentially a reference book with each tool, and a short description of how it works。 I'm not sure how valuable I find this, given that the tools are all open-source and that anything but the title doesn't seem worth remembering。 I skimmed through most of this, and don't see myself referencing it again, since all that's more readily available with Google。Again, as was my pet-peeve with Systems Performance, nothing about historical tooling。 I can't not give four stars though。 Hard to see who else could write this book。 It's a joy to read something by someone who's such an expert in his field。 The exercises are fantastic, and doing a few of them was the most value I derived from it。 。。。more

Skylar

Gregg put his career of performance analysis into this book。 While there is a focus on web/cloud workloads, any IT professional will get something out of it。