Skip to content

Bpf

1 page

  • bpftrace: one-liners that replace strace in production

    In Posts 844 words 4 min

    LinuxTracingBpfPerformanceDebug

    strace halts a process on every syscall. On a live server at 2000 RPS, that means timeouts and alerts. bpftrace runs through eBPF in the kernel — tracing happens in parallel, without stopping anything. The overhead difference is orders of magnitude. …

    strace halts a process on every syscall. On a live server at 2000 RPS, that means timeouts and alerts. bpftrace runs through eBPF in the kernel — tracing happens in parallel, without stopping anything. The overhead difference is orders of magnitude. …