About this episode

Daniel Finneran discusses the evolution of eBPF and its impact on Linux kernel observability and security.

Daniel Finneran explores how eBPF has evolved far beyond its roots in packet filtering into a robust, safe way to extend the Linux kernel. He explains how the eBPF "verifier", the security guardrail, enables implementation of deep observability and networking without the risks of traditional kernel modules or the slow upstreaming process. He touches on tools like Tetragon that leverage eBPF for "front-foot" security enforcement, proactively intercepting threats such as buffer overflows before they execute, while providing visibility into file systems and drivers without intrusive instrumentation. Read a transcript of this interview: https://bit.ly/4ew9ONB Newsletter: Subscribe to the Software Architects' Newsletter, a monthly roundup of the patterns and technologies senior practitioners are working through, with the news and lessons from people doing the work: https://www.infoq.com/software-architects-newsletter InfoQ Online Certification Programs: 5-week online cohorts for senior engineers and architects, built around QCon talks. Programs now cover software architecture, AI engineering, and organizational architecture. Each week you join a four-hour live session with a…

People in this episode

Guest: Daniel Finneran

Topics covered

• eBPF
• Linux kernel
• observability
• networking
• security
• buffer overflows

Keywords

• eBPF
• Linux kernel
• deep observability
• networking
• security enforcement
• buffer overflows
• Tetragon

Mentioned in this episode

Organizations: InfoQ

Products: Tetragon

More episodes of The InfoQ Podcast

• Strands Agents with Clare Liguori · July 20, 2026 · 39 min
• Governance in the Age of AI: A Conversation with Sarah Wells · July 13, 2026 · 48 min
• Spite-Driven Engineering: A New Blueprint for Cloud Security in the AI Native Era · July 6, 2026 · 41 min
• Architectural Patterns: Moving Beyond Cloud-Native to Local-First - Insights from Adam Wiggins · June 29, 2026 · 39 min
• Increasing Users’ Data Agency: From BlueSky's AT Protocol to the Local-First Software Movement · June 15, 2026 · 40 min

Explore listener stats, chart rankings, contacts and more on the The InfoQ Podcast podcast page.