# What is eBPF? | How eBPF works

DevFeed: [What is eBPF? | How eBPF works](<https://devfeed.tech/articles/what-is-ebpf-how-ebpf-works-29960.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/what-is-ebpf/>)

Author: info@goteleport.com (Virag Mody)

Published: 2020-11-05T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [eBPF](<https://devfeed.tech/topics/ebpf.md>), [Linux Kernel](<https://devfeed.tech/topics/linux-kernel.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [bytecode](<https://devfeed.tech/tags/bytecode.md>), [ebpf](<https://devfeed.tech/tags/ebpf.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [linux-kernel](<https://devfeed.tech/tags/linux-kernel.md>), [operating-systems](<https://devfeed.tech/tags/operating-systems.md>)

## AI overview

This tutorial introduces eBPF, explaining how it lets programmers execute custom bytecode within the Linux kernel without modifying the kernel or loading kernel modules. It also covers kernel space, user space, and the motivation for extending the kernel.

## Source excerpt

eBPF lets programmers execute custom bytecode within the kernel without having to change the kernel or load kernel modules.