Datadog On eBPF
eBPF (extended Berkeley Packet Filter) is a Linux technology that can run sandboxed programs in the kernel without changing kernel source code or loading kernel modules. While the kernel is an ideal place to implement monitoring/observability, networking, and security it wasn't until the recent broad adoption of eBPF that it was feasible. Datadog has embraced the possibilities that eBPF brings in those areas and there are several teams already using eBPF in their products.