# How eBPF Empowers Developers to Observe Inside the Linux Kernel in a Safe and Unintrusive Way

Page: https://stenobird.com/podcast/the-infoq-podcast-1106590/how-ebpf-empowers-developers-to-observe-inside-the-linux-kernel-in-a-safe-and-unintrusive-way
Text version: https://stenobird.com/podcast/the-infoq-podcast-1106590/how-ebpf-empowers-developers-to-observe-inside-the-linux-kernel-in-a-safe-and-unintrusive-way.md
Podcast: [The InfoQ Podcast](https://stenobird.com/podcast/the-infoq-podcast-1106590)
Published: 2026-06-22T10:00:02+00:00
Episode link: https://soundcloud.com/infoq-channel/how-ebpf-empowers-developers
Audio file: http://dts.podtrac.com/redirect.mp3/feeds.soundcloud.com/stream/2340378536-infoq-channel-how-ebpf-empowers-developers.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/the-infoq-podcast-1106590/episodes/how-ebpf-empowers-developers-to-observe-inside-the-linux-kernel-in-a-safe-and-unintrusive-way
Duration seconds: 2624

## Resource

Daniel Finneran explores how eBPF has evolved far beyond its roots in packet filtering into a robust, safe way to extend the Linux kernel. He explains how the eBPF "verifier", the security guardrail, enables implementation of deep observability and networking without the risks of traditional kernel modules or the slow upstreaming process. He touches on tools like Tetragon that leverage eBPF for "front-foot" security enforcement, proactively intercepting threats such as buffer overflows before they execute, while providing visibility into file systems and drivers without intrusive instrumentation. Read a transcript of this interview: https://bit.ly/4ew9ONB Newsletter: Subscribe to the Software Architects' Newsletter, a monthly roundup of the patterns and technologies senior practitioners are working through, with the news and lessons from people doing the work: https://www.infoq.com/software-architects-newsletter InfoQ Online Certification Programs: 5-week online cohorts for senior engineers and architects, built around QCon talks. Programs now cover software architecture, AI engineering, and organizational architecture. Each week you join a four-hour live session with a confidential peer group of practitioners from other companies, apply frameworks from QCon talks to the decisions you're making at work, and earn an InfoQ certification. You leave with new approaches, or confirmation that the calls you're already making are the right ones. Learn more: https://certification.qconferences.com/ Upcoming Events: QCon San Francisco 2026 (November 16-20, 2026) https://qconsf.com/ QCon London 2027 (April 13-16, 2027) https://qconlondon.com/ The InfoQ Podcasts: Weekly conversations with senior software leaders about how they build systems and teams, including what they'd do diffe…

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/the-infoq-podcast-1106590/episodes/how-ebpf-empowers-developers-to-observe-inside-the-linux-kernel-in-a-safe-and-unintrusive-way/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/the-infoq-podcast-1106590/how-ebpf-empowers-developers-to-observe-inside-the-linux-kernel-in-a-safe-and-unintrusive-way.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.