A Beginner's Guide to eBPF in Rust

This tutorial is a step-by-step introduction to learning eBPF using the Rust programming language. It is designed specifically for beginners who want to explore how eBPF works under the hood without getting overwhelmed.

By following this guide, you will learn the basics of eBPF and eventually combine different concepts to build a simple, educational eBPF agent.

All the code and examples are available on GitHub. If you find this guide helpful, feel free to drop a star! ⭐ github.com/amghazanfari/ebpf-beginner

We will use the Aya framework, which allows us to write both eBPF programs and the userspace applications entirely in Rust.

📖 Read it online

The full book is hosted on GitHub Pages: https://amghazanfari.github.io/ebpf-beginner/

Table of Contents

• Chapter 1: Getting Started with eBPF and Aya
• Chapter 2: Kprobes and Tracing
• Chapter 3: Basic Networking with XDP
• Chapter 4: Traffic Control (TC)
• Chapter 5: Tracepoints and Uprobes
• Chapter 6: eBPF Maps and State
• Chapter 7: Basic Security and Mitigation
• Chapter 8: Combining Programs (A Simple Agent)