eBPF summit 2023 Register now

eBPF Case Studies

Here are some of the organizations that are using eBPF in production. If you’re using eBPF and aren’t on this list, please submit a pull request.

  • Google

    Google uses eBPF for security auditing, packet processing, and performance monitoring.

  • Netflix

    Netflix uses eBPF at scale for network insights.

  • Android

    Android uses eBPF to monitor network usage, power, and memory profiling.

  • S&P Global

    S&P Global uses eBPF through Cilium for networking across multiple clouds and on-prem.

  • Shopify

    Shopify uses eBPF through Falco for intrusion detection.

  • Cloudflare

    Cloudflare uses eBPF for network security, performance monitoring, and network observability.

  • Ikea

    Ikea uses eBPF through Cilium for networking and load balancing in their private cloud.

  • Apple

    Apple uses eBPF through Falco for kernel security monitoring.

  • Meta

    Meta uses eBPF to process and load balance every packet coming into their data centers

  • Datadog

    Datadog uses eBPF for networking and security in their SaaS product

  • Alibaba

    Alibaba uses eBPF through Cilium to provide networking in their cloud

  • Seznam

    Seznam uses eBPF for load balancing

  • Trip.com

    Trip.com uses eBPF for load balancing

  • Bell

    Bell Canada uses eBPF to moderize telco networking with SRv6

  • Wildlife Studios

    Wildlife Studios uses eBPF through Cilium for high performance game networking

  • Capital One

    Capital One uses eBPF to secure their cloud infrastructure

  • Sky

    Sky uses eBPF through Cilium for cloud networking

  • Walmart

    Walmart uses eBPF for edge cloud load balancing

  • Palantir

    Palantir uses eBPF to debug networking problems

  • Cruise

    Cruise uses eBPF to monitor GPU performance

  • Digital Ocean

    Digital Ocean uses eBPF to monitor GPU performance

  • Yahoo

    Yahoo uses eBPF for load balancing and performance analysis

  • Bytedance

    Bytedance uses eBPF for system tracing

  • F5

    F5 BIG-IP integration with Cilium VTEP feature

  • LinkedIn

    LinkedIn uses eBPF for Infrastructure Observability

  • The New York Times

    The New York Times uses eBPF for networking

  • SentinelOne

    SentinelOne uses eBPF to detect and to respond to runtime threats like ransomware and zero-day exploits in real time.

  • Akita

    Akita uses eBPF at scale for API observability.