eBPF Case Studies
Here are some of the organizations that are using eBPF in production. If you’re using eBPF and aren’t on this list, please submit a pull request.
- Google
Google uses eBPF for security auditing, packet processing, and performance monitoring
- Netflix
Netflix uses eBPF at scale for network insights
- Android
Android uses eBPF to monitor network usage, power, and memory profiling
- S&P Global
S&P Global uses eBPF through Cilium for networking across multiple clouds and on-prem
- Meta
Meta uses eBPF to process and load balance every packet coming into their data centers
- Cloudflare
Cloudflare uses eBPF for network security, performance monitoring, and network observability
- Shopify
Shopify uses eBPF through Falco for intrusion detection
- Microsoft
Microsoft uses eBPF to enhance the observability and inspection of processes within Kubernetes
- Polar Signals
Polar Signals uses eBPF to monitor and measure cross-zone network traffic
- Samsung
Samsung uses eBPF in their android devices for networking
- Ikea
Ikea uses eBPF through Cilium for networking and load balancing in their private cloud
- Apple
Apple uses eBPF through Falco for kernel security monitoring
- DoorDash
DoorDash uses eBPF through BPFAgent for kernel level monitoring
- Datadog
Datadog uses eBPF for networking and security in their SaaS product
- Alibaba
Alibaba uses eBPF through Cilium to provide networking in their cloud
- Red Hat
Red Hat uses eBPF at scale for load balancing and tracing in their private cloud
- Isovalent
eBPF is the technlogy that powers Isovalent's enterpise networking, observability and security solutions
- Seznam
Seznam uses eBPF for load balancing
- Trip.com
Trip.com uses eBPF for load balancing
- Bell
Bell Canada uses eBPF to moderize telco networking with SRv6
- Wildlife Studios
Wildlife Studios uses eBPF through Cilium for high performance game networking
- Capital One
Capital One uses eBPF to secure their cloud infrastructure
- Sky
Sky uses eBPF through Cilium for cloud networking
- Walmart
Walmart uses eBPF for edge cloud load balancing
- Palantir
Palantir uses eBPF to debug networking problems
- Cruise
Cruise uses eBPF to monitor GPU performance
- Digital Ocean
Digital Ocean uses eBPF to monitor GPU performance
- Yahoo
Yahoo uses eBPF for load balancing and performance analysis
- Bytedance
Bytedance uses eBPF for system tracing
- F5
F5 BIG-IP integration with Cilium VTEP feature
- LinkedIn
LinkedIn uses eBPF for Infrastructure Observability
- The New York Times
The New York Times uses eBPF for networking
- SentinelOne
SentinelOne uses eBPF to detect and to respond to runtime threats like ransomware and zero-day exploits in real time.
- Aqua Security
Aqua Security uses eBPF to handle runtime detection and forensics
- Odigos
Odigos uses eBPF to automatically instrument any application, including automatic context propagation
- Oligo Security
Oligo Security uses eBPF for application security observability and protection
- Akita
Akita uses eBPF at scale for API observability
- groundcover
groundcover uses eBPF to instantly monitor application performance in cloud native environments, at any scale.
- Line Coporation
Line Corporation uses eBPF at scale for load balancing and tracing in their private cloud
- Exein
Exein uses eBPF in their open source runtime security framework for IoT
- Ant Group
Ant Group uses eBPF in their cloud native security platform for vulnerability live-patching, and system anomaly detection
- Sysdig
Sysdig uses eBPF to enable high-performance system call tracing, facilitate container-aware troubleshooting, conduct security auditing, and provide rich insights and data from the kernel
- Kodem
Kodem uses eBPF for application visibilty and runtime intelligence
- Cycode
Cycode uses eBPF for CI/CD security
- Wiz
Wiz uses eBPF to provide real-time threat detection and monitoring within cloud workloads
- Core Tech
Core Tech uses eBPF to filter out unwanted traffic and mitigate DDoS attacks
- FlowSecurity
Flow Security uses eBPF technology to analyze data in motion for data discovery, classification, risk management, and data violation detection and response
- Helios
Helios uses eBPF in their runtime analysis tool for observability and security
- ThreatX
ThreatX uses eBPF for securing their runtime environment and delivering real-time blocking for runtime threats
- Levo
Levo uses eBPF for API discovery and documentation
- Traceable
Traceable uses eBPF for enhanced data collection
- ArvanCloud
ArvanCloud uses eBPF for their CDN product
- RAD Security
RAD Security uses eBPF for runtime threat detection and supply chain verification
- Qpoint
Qpoint uses eBPF to monitor and secure egress traffic to your external vendor APIs
- Attribute
Attribute uses eBPF to provide real time, no tagging cloud cost visibility and attribution for dynamic environments
- ProtectAI
Protect AI uses eBPF to secure LLM applications in production at runtime, providing visibility for advanced threat detection and response capabilities
- Akto
Akto uses eBPF to monitor APIs and their traffic
- Upwind Security
Upwind Security leverages eBPF to deliver deep real-time/runtime cloud security at scale
- Canopus
Canopus Networks developed “SuperNetflow,” a powerful observability pipeline that leverages eBPF to monitor and classify traffic at scale
- Wikimedia
Wikimedia Foundation developed Liberica, a load balancer that supports multiple forwarding planes including Katran, Meta’s XDP-based load balancer built on eBPF
- Rakuten Mobile
Rakuten Mobile uses eBPF for anomaly detection and security in cloud native telecom networks
- free5GC
free5GC uses eBPF for improving the data plane latency on Kubernetes deployment