Michael Kehoe

DESCRIPTION Unlock the power of eBPF, the revolutionary Linux kernel technology transforming observability, networking, and security. This book serves as your comprehensive resource to master this cutting-edge technology, whether you are a beginner exploring its potential or a seasoned professional seeking in-depth knowledge.Embark on a structured learning journey, starting with classic BPF (cBPF) and its evolution to modern eBPF, grasping its architecture and core programming primitives like the BPF syscall and various program/attachment types. Discover practical development using key eBPF programming libraries such as libbpf and bpftrace, and learn to write your first program. Explore BPF portability with CO-RE and efficient eBPF deployment. Uncover potent applications in eBPF observability (kprobes, tracepoints), eBPF networking (XDP, socket filters), and eBPF security. Finally, delve into key eBPF open-source projects like Cilium and Falco.By the end of this definitive guide, you will possess a robust understanding of eBPF, equipped with the practical skills to develop, deploy, and leverage its immense capabilities across diverse domains, making you a proficient practitioner in this transformative field.WHAT YOU WILL LEARN● cBPF history, eBPF architecture, core primitives, and deployment.● eBPF programming, portability, observability, networking, and security.● BPF evolution, eBPF internals, practical application, and ecosystem.● Kernel probing, packet manipulation, and secure eBPF development.● eBPF tools, libraries, deployment strategies, and open-source projects.● Tracing kernel/user space, network filtering/modification, and security enforcement.WHO THIS BOOK IS FORWhether you are a software developer, network engineer, security professional, or systems administrator, this book provides the knowledge to leverage eBPF for enhanced system observability, advanced networking, and security enforcement in your environment.

System downtime is a common pain point for a great many organizations. Recently, a 12-hour store outage cost one Silicon Valley giant $25 million. And a 14-hour outage cost another corporation an estimated $90 million. News like this reminds companies that they need an incident management program before the unexpected happens. And there's no better time to get started than now. But where do you begin? What elements does your program require? Who should be in charge? In this practical book, seasoned professionals Michael Kehoe and David Cintz, who build, maintain, and run incident management programs for Confluent and LinkedIn, show you how to create a program that's effective, efficient, scalable, and automated—regardless of the size of your organization. You'll also learn how to tailor the program to meet the specific needs of your company as it continues to grow. This book will help you: Understand the importance and benefits of an incident management program Create an effective incident categorization system and after-incident review program Create an effective automation strategy for incidents Build a comprehensive on-call program and train engineers About the authors: Michael Kehoe is an author, speaker, and senior staff security engineer at Confluent, leading security initiatives for multiple organizations. David Cintz is an expert in leading large-scale incident response programs and serves as the staff technical program manager for security incidents at Confluent.

The cloud is becoming the de facto home for companies ranging from enterprises to startups. Moving to the cloud means moving your applications from monolith to microservices. But once you do, running and maintaining these services brings its own level of complexity. The answer? Modularity, deployability, observability, and self-healing capacity through cloud native development. With this practical book, Nishant Singh and Michael Kehoe show you how to build a true cloud native infrastructure using Microsoft Azure or another cloud computing solution by following guidelines from the Cloud Native Computing Foundation (CNCF). DevOps and site reliability engineers will learn how adapting applications to cloud native early in the design phase helps you fully utilize the elasticity and distributed nature of the cloud. This book helps you explore: Why go cloud native? How to use infrastructure as code What it takes to containerize an application Why and how Kubernetes is the "grand orchestrator" How to create a Kubernetes cluster on Azure How observability complements monitoring How to use service discovery and a service mesh to find new territories How networking and policy management serve as gatekeepers How distributed databases and storage work