About
This is a small collection of technical notes from hands-on lab work. Mostly eBPF, XDP, and the Linux kernel datapath — the messy bits between "the textbook explanation" and "what actually happens on the wire."
No ads. No newsletter. No comment system. No JavaScript trackers. The notes are written when I figure something out worth writing down, and published when they're done.
What you'll find here
- XDP and tc-bpf datapath
- Network observability tooling
- Linux kernel networking primitives
- Occasional postmortems from things I've broken
- XDP and tc-bpf datapath
- BPF maps, verifier patterns, and ringbuf events
- Conntrack internals and netfilter
- Container network observability
What you won't find here
- Tutorials. Use Cloudflare Learning Center.
- Vendor reviews. I don't take review units.
- Hot takes. There are other places for those.
Contact
Reachable at notes@lab.example. I read everything,
respond to most things, and apologize in advance for replying slowly.