Difference with other go ebpf libraries

[tamalsaha]

Thanks for open sourcing this. I am curious to understand what are the differences among this and other goebpf libraries?

• https://github.com/iovisor/gobpf
• https://github.com/newtools/ebpf
• https://github.com/andrewkroh/go-ebpf

[belyalov]

Thanks for question! :)

So, I'd say that main difference is our library intended to be really simple to use but still preserves low level API so you can do basic things (load / attach / work with maps) in a real simple way, e.g. (snipped from readme.md):

    bpf.LoadElf("test.elf")
    xdp := bpf.GetProgramByName("xdp_test")
    xdp.Load()
    xdp.Attach("eth0")
    // etc

If I would compare it to libraries you mentioned above:

• iovisor gobpf - is go bindings for bcc framework (developed by the same team, iovisor)
• newtools ebpf - we found it a bit complicated to use, however I believe it does the same thing as Dropbox's ebpf library.
• andrewkroh go-ebpf - I personally haven't tried this library, from brief look it is unclear how to use it, so can't describe the difference.

Hope it helps you.

[tamalsaha]

Thanks for the response!