Get the latest tech news

Dropping eBPF CPU Cost by About 90% with Memoization (Not AI Gen)


My brother and I spent a lot of time designing our eBPF security agent to be really fast from the ground up, but recently we discovered we could make it much faster using memoization! A couple of weeks ago, I profiled the eBPF code and found that the most expensive part of the protection isn’t actually enforcing a policy (allow/deny), but figuring out which policy applies to a given file open.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of gen

gen

Photo of eBPF

eBPF

Photo of memoization

memoization

Related news:

News photo

Bose QuietComfort Headphones (2nd gen) review: Upgraded in all the right places

News photo

Show HN: DOOM in the kernel, or fibers in eBPF

News photo

Arm debuts next-gen semi-custom Neoverse CSS N4 ‘Falcon' platform — compute subsystem packs up to 128 cores per die on TSMC N3P