Inside the kernel: Why eBPF matters for platform engineering

Platform engineers spend most of their time shaping the control plane, but the real leverage lives in the data plane. This talk introduces eBPF as a foundational Linux capability that lets users run safe, programmable logic inside the kernel to observe, enforce, and optimize systems at runtime. Attendees will build a clear mental model of how eBPF works and why it matters for Kubernetes platforms, from high-packet-per-second networking to runtime security and deep observability.

The session then connects theory to practice by showing how platforms can unlock these advantages through tools built on eBPF, such as Cilium and Tetragon. Attendees will leave understanding not just what these tools do, but why they work, and how eBPF becomes a strategic advantage when designing modern cloud-native platforms.