diff --git a/src/0-introduce/README.md b/src/0-introduce/README.md index ed5f0ce..310cb91 100644 --- a/src/0-introduce/README.md +++ b/src/0-introduce/README.md @@ -48,7 +48,7 @@ Organizations across industries have adopted eBPF at scale: eBPF's ability to dynamically adjust system behavior and extend into user space makes it an essential technology for modern computing. Whether it's optimizing network traffic, improving security, or enhancing system performance, eBPF enables developers to address real-time requirements efficiently and safely. -In addition to its kernel-mode runtime, eBPF can also be extended to user space. For example, [bpftime](https://github.com/eunomia-bpf/bpftime), a user-space eBPF runtime, allows for higher-performance tracing, performance analysis, and plugin support in user-space applications. This extension of eBPF into user space helps improve flexibility and performance in various use cases that go beyond kernel-level tasks. +In addition to its kernel-mode runtime, eBPF can also be extended beyond the kernel. For example, [bpftime](https://github.com/eunomia-bpf/bpftime) is a user-space eBPF runtime that allows for higher-performance tracing (10x faster than kernel uprobes), performance analysis, and plugin support in user-space applications without requiring manual recompilation or process restarts. eBPF programs can now even be offloaded to GPUs through bpftime integration, enabling dynamic instrumentation of GPU kernels with low overhead. This extension of eBPF beyond kernel space helps improve flexibility and performance across CPU, user-space, and GPU workloads. ### Future: The Expanding Potential of eBPF @@ -70,7 +70,7 @@ You'll learn eBPF fundamentals and how they integrate with the Linux kernel. We' ### Prerequisites -Before starting, make sure you have a Linux system with kernel version 4.8 or higher (we recommend 5.15+ or 6.2+ for full feature support). You'll need basic C programming knowledge and familiarity with system concepts like processes and system calls. Most examples require root or sudo privileges to run. You should also install development tools like clang, llvm, and libelf-dev on your system. +Before starting, make sure you have a Linux system with kernel version 4.8 or higher (we recommend 5.15+ or 6.9+ for full feature support, including BPF arena and tokens). You'll need basic C programming knowledge and familiarity with system concepts like processes and system calls. Most examples require root or sudo privileges to run. You should also install development tools like clang, llvm, and libelf-dev on your system. --- diff --git a/src/0-introduce/README.zh.md b/src/0-introduce/README.zh.md index 88e8b35..4b9dd92 100644 --- a/src/0-introduce/README.zh.md +++ b/src/0-introduce/README.zh.md @@ -49,7 +49,7 @@ eBPF 已发展为一个多功能框架，超越了其最初的网络用途，现 eBPF 能够动态调整系统行为并扩展到用户空间，使其成为现代计算不可或缺的技术。无论是优化网络流量、提升安全性，还是增强系统性能，eBPF 都能帮助开发者高效、安全地应对实时需求。 -除了其内核模式运行时，eBPF 还可以扩展到用户空间。例如，[bpftime](https://github.com/eunomia-bpf/bpftime) 是一个用户空间 eBPF 运行时，允许在用户空间应用中进行高性能追踪、性能分析和插件支持。这种 eBPF 向用户空间的扩展有助于在各种超越内核级任务的用例中提高灵活性和性能。 +除了其内核模式运行时，eBPF 还可以扩展到内核之外。例如，[bpftime](https://github.com/eunomia-bpf/bpftime) 是一个用户空间 eBPF 运行时，允许在用户空间应用中进行高性能追踪(比内核 uprobe 快 10 倍)、性能分析和插件支持，且无需手动重新编译或重启进程。通过 bpftime 集成，eBPF 程序现在甚至可以卸载到 GPU，以低开销实现 GPU 内核的动态检测。这种 eBPF 超越内核空间的扩展有助于在 CPU、用户空间和 GPU 工作负载中提高灵活性和性能。 ### 未来：eBPF 的扩展潜力