Skip to content

Using eBPF for Non-invasive, Performant, Instant Network Monitoring#

KubeCon + CloudNativeCon Europe 2025 (London) digest Program Wildcard pick London · 1–4 April 2025

Abstract Recording

Mario Macías & Marc Tudurí, Grafana — Wildcard

Play the recording: Using eBPF for Non-invasive, Performant, Instant Network Monitoring

  • Why: Not a design talk, but a genuinely different operational capability: getting L3–L7 network observability without redeploying network infrastructure or instrumenting applications, purely by attaching eBPF at different stack layers — worth seeing even outside core networking-design interest.
  • What: How Grafana built plug-and-play network and service observability by attaching eBPF probes across network layers, correlating low-level packet flow with L7 request/response detail and Kubernetes metadata. (from abstract only)
  • How: eBPF hooks into different layers of the service-infrastructure stack to extract flow and request-level data automatically, without needing SDN-provider support or invasive packet-analyzer deployments. (from abstract only)
  • Where applicable: General; particularly useful where you don't control the underlying SDN/network infrastructure and need observability anyway.