eBPF Observability Agent
- Built a zero-instrumentation eBPF agent that reconstructs HTTP/1.1, HTTP/2, and gRPC request latency plus a live service map purely from kernel syscalls and OpenSSL uprobes — no application code changes. - Deployed as a Kubernetes DaemonSet on k3s with OTLP export, sticky-sampling for overload survival, and on-CPU stack profiling joined to slow spans. - Characterized the limits of full-fidelity tracing under peak load, finding ~87% single-core overhead versus an original <2% target and motivating adaptive sampling and load-shedding strategies.
