Unleashing the Kernel With eBPF

eBPF is a kernel technology that is enabling a new generation of high-performance, low-overhead tools for networking, security and observability. This talk will use demos and examples to explain how it works, and why the ability to customize the kernel’s behavior leads to such powerful and efficient capabilities. You’ll leave this talk understanding why you should be using eBPF-based infrastructure tools in your organization! 

What's the focus of your work these days?

Since I joined Isovalent three years ago I’ve been lucky enough to immerse myself in the world of eBPF, working alongside colleagues who really pioneered this technology. Our team originated the Cilium open source project for network connectivity, security and observability. I’m also involved in the CNCF Governing Board, and on the board of OpenUK. 

What's the motivation for your talk at QCon London 2024?

eBPF has received a lot of attention in the last couple of years, because it’s such a powerful platform for building efficient infrastructure tools for observing and securing applications running on Linux. 

How would you describe your main persona and target audience for this session?

The tools I’ll be discussing will be of interest to networking, security, or platform teams who are responsible for the infrastructure that underpins their organization’s deployments, but I think the concept of eBPF can appeal to any engineer who is interested in how things work - especially if you like to see demos to make concepts more concrete! 

Is there anything specific that you'd like people to walk away with after watching your session?

I hope that the audience will leave my talk inspired to try some eBPF-based tools for powerful and incredibly low-priced overhead functionality implemented within the kernel.


Liz Rice

Chief Open Source Officer @Isovalent

Liz Rice is Chief Open Source Officer with eBPF specialists Isovalent, creators of the Cilium cloud native networking, security and observability project. She is the author of Container Security, and Learning eBPF, both published by O'Reilly, and she sits on the CNCF Governing Board, and on the Board of OpenUK. She was Chair of the CNCF's Technical Oversight Committee in 2019-2022, and Co-Chair of KubeCon + CloudNativeCon in 2018.

She has a wealth of software development, team, and product management experience from working on network protocols and distributed systems, and in digital technology sectors such as VOD, music, and VoIP. When not writing code, or talking about it, Liz loves riding bikes in places with better weather than her native London, competing in virtual races on Zwift, and making music under the pseudonym Insider Nine.

Read more
Find Liz Rice at:


Tuesday Apr 9 / 01:35PM BST ( 50 minutes )


Mountbatten (6th Fl.)


ebpf cloud native


From the same track

Session Quarkus

Zero Waste, Radical Magic, and Italian Graft – Quarkus Efficiency Secrets

Tuesday Apr 9 / 03:55PM BST

What makes a platform efficient? Is it how quickly code executes, or is it how quickly developers can use it to solve problems? Quarkus makes both people and hardware more efficient. That’s cool, but how does it work?

Speaker image - Holly Cummins
Holly Cummins

Full Stack Engineer, Building Quarkus @Red Hat, Former Lead Consultant

Session Rust

Not Just Memory Safety: How Rust Helps Maintain Efficient Software

Tuesday Apr 9 / 11:45AM BST

Rust's claim to fame is its memory safety without compromising on performance, eliminating whole classes of security vulnerabilities and bringing systems programming to the new generation.

Speaker image - Pietro Albini
Pietro Albini

Technical Lead of Ferrocene @Ferrous Systems, Formerly on the Rust Core Team, and Previous Lead of the Rust Infrastructure Team

Session high performance

What Can You Learn From the Fastest Code in the World?

Tuesday Apr 9 / 10:35AM BST

One of the challenges in the cloud is handling the vast amount of data that has to be sent and received. Doing this in software reduces the need for specialist hardware and increases flexibility.That's why superfast data planes exist.

Speaker image - Alan Elder
Alan Elder

Principle Software Engineering Manager @Microsoft

Session WebAssembly

Turbocharged Development: The Speed and Efficiency of WebAssembly

Tuesday Apr 9 / 05:05PM BST

The **software carbon intensity (SCI)** of an application is the sum of its operational emissions and embodied hardware emissions. Serverless, or functions as a service (FaaS), provides a path towards reducing operational emissions by running event-driven applications only as needed.

Speaker image - Danielle Lancashire
Danielle Lancashire

Principal Software Engineer @Fermyon, Kubernetes Maintainer


Unconference: Efficient Programming Languages

Tuesday Apr 9 / 02:45PM BST

An unconference is a participant-driven meeting. Attendees come together, bringing their challenges and relying on the experience and know-how of their peers for solutions.