Linux 内核 KASAN/KFENCE/UBSAN 生产环境内存安全工程实战
深入剖析 Linux 内核三大内存安全检测工具——KASAN (Kernel Address Sanitizer)、KFENCE (Kernel Electric Fence)、UBSAN (Undefined Behavior Sanitizer) 的内部机制，提供从开发调试到生产环境部署的完整工程实践方案，包含影子内存原理、采样检测机制、性能对比与实战案例。
eBPF
eBPF: The Kernel Superpower for Observability, Security, and Networking
Deep dive into eBPF: architecture, verifier, maps, XDP, real-world deployments, performance benchmarks, and ecosystem projects
Linux内核网络栈深度实战 — 从数据包接收到协议栈处理全链路
深入解析Linux内核网络栈的工作原理，涵盖网卡驱动、NAPI机制、协议层处理、Netfilter框架、eBPF/XDP加速等核心内容，并提供性能优化的最佳实战技巧
eBPF技术深度实战：从内核可观测性到零侵入性能优化
深入解析eBPF技术架构、编程模型与生产实战，涵盖内核可观测性、XDP高性能网络、容器安全检测、火焰图分析等企业级场景。
XDP 极速网络处理：从内核旁路到可编程数据面的深度实战
深入解析Linux XDP(eXpress Data Path)技术：从驱动层eBPF挂载、BPF map选型到L4负载均衡和生产级DDOS防护，全面对比DPDK/iptables，附实战代码和性能基准。
Linux内核网络栈深度实战：从数据包收收到协议栈处理全链路解析
深入剖析Linux内核网络栈核心原理，从数据包到达网卡到协议栈全链路处理，涵盖NAPI轮询、Netfilter框架、TCP拥塞控制、零拷贝技术、BBR算法及生产环境调优实战案例。
eBPF Networking Deep Dive: From XDP Packet Processing to TCP Tracing and Production Deployment
Comprehensive deep-dive into eBPF networking internals: XDP packet processing at driver level, Traffic Control subsystem, socket-level tracing with kprobes, TCP state machine and retransmission analysis, DNS query monitoring, network latency distribution and throughput measurement, production deployment guide with kernel configuration, containerized environments, and performance optimization strategies.
eBPF Kernel Observability Deep Dive: Engineering Paradigm from Bytecode Injection to Zero-Overhead Tracing
eBPF revolutionizes Linux kernel observability. Covers virtual machine architecture, maps, kprobes, tracepoints, XDP, BTF, ring buffer, bpftrace, BCC, libbpf CO-RE, and four production-grade zero-overhead tracing case studies.
XDP深度实战：Linux内核高速数据包处理与DDoS防护
深入解析Linux内核XDP(eXpress Data Path)技术，从内核网络栈旁路架构到生产级DDoS防护系统构建，涵盖XDP程序编写、BPF Maps实战、性能调优与云原生部署。
eBPF: Linux Kernel Programmability Revolution
Deep-dive technical guide covering eBPF architecture, XDP packet processing, observability tracing, runtime security, and practical development with libbpf and CO-RE. Complete benchmark data and production deployment patterns.
