🦀
RustInfraJobs High-Yield Rust & AI Systems
#ebpf • $202k-$278k USD Base

eBPF in Production Rust: Architecture & Open Roles

Sandboxed Linux kernel bytecode for XDP packet filtering & tracing

1. Why Teams Deploy eBPF

eBPF allows systems engineers to run sandboxed, verifier-checked bytecode directly inside the Linux kernel without loading risky kernel modules. In Rust infrastructure, eBPF powers two huge domains: high-speed L3/L4 packet processing via XDP (eXpress Data Path) at Cloudflare and Fly.io, and zero-instrumentation continuous profiling and security observability at Datadog, Polar Signals, and Isovalent.

2. eBPF Kernel & Memory Internals

Before an eBPF program attaches to a `kprobe`, `tracepoint`, `cgroup`, or network driver XDP hook, the in-kernel verifier analyzes every possible branch path to guarantee bounded loops, valid pointer arithmetic, and safe map lookups. User-space Rust daemons communicate with kernel eBPF programs asynchronously via `BPF_MAP_TYPE_RINGBUF` ring buffers, per-CPU hash maps, and sockmap socket redirection.

3. eBPF Interview & Hiring Bar

Kernel and networking teams pay $190k to $295k for engineers who can write verifier-compliant eBPF dataplanes, debug packet drops with `bpftool`, and build low-overhead user-space control agents in Rust.

Open eBPF Engineering Positions (5)