Accessing the Linux kernel using eBPF and Rust

Arto Gahr

Most network tools treat traffic like a black box, but eBPF lets us look inside. In this session, we are going to build a tool that identifies which apps are talking to the internet and gives you the power to block them directly in the kernel. We will move past the usual IP-based routing and use Rust to write high-performance kernel code that actually understands process identity.

Arto Gahr is a Senior Software / DevOps Engineer @ Barclays, working with Rust on my thesis and other side projects