eBPF

RU: eBPF

A Linux kernel subsystem that allows sandboxed programs to run safely in kernel space without modifying kernel source or loading modules. The kernel verifies each program before execution; eBPF is the foundation of modern low-overhead observability tools, network packet filters, and security enforcement agents.