eBPF Network Metrics for Kernel-Level Observability | New Relic

"eBPF is a groundbreaking kernel technology introduced in Linux 4.x, enabling bytecode to run directly within the Linux kernel. Functioning as a lightweight, sandboxed virtual machine embedded in the kernel, eBPF provides controlled access to specific kernel resources in a secure and efficient manner."

"New Relic is advancing a unified approach to observability by leveraging the power of eBPF with the release of a new eBPF-based agent. This single, lightweight, high-performance agent is strategically designed to consolidate multiple planes of observability-including network performance, APM telemetry, infrastructure metrics, and logging data-into a cohesive stream."

"eBPF Network Metrics provides deep visibility into TCP and DNS behavior directly from the Linux kernel by leveraging the new eBPF Agent, offering high-fidelity, real-time data without requiring changes to application code or traditional packet capture methods."

eBPF is a kernel technology enabling bytecode execution within the Linux kernel as a lightweight, sandboxed virtual machine. New Relic leverages eBPF to create a unified observability agent consolidating network performance, APM telemetry, infrastructure metrics, and logging data. Operating within the kernel with minimal overhead, this single agent eliminates resource-intensive collection methods and reduces complexity. The new eBPF Network Metrics feature provides deep visibility into TCP and DNS behavior directly from the kernel without requiring application code changes or traditional packet capture. Modern distributed applications frequently fail at the network layer, creating blind spots that complicate root cause analysis. This unified approach addresses the challenge of mean time to innocence by providing high-fidelity, real-time data and complete visibility across dynamic environments.

Read at New Relic