eBPF: Correlating rustls Plaintext to TCP Connections Without a File Descriptor
Follow an eBPF debugging trail through rustls, Tokio inlining, and an empty map to learn how TLS plaintext gets matched to the right TCP connection.
Posts by Shaun Duncan
Senior engineer at Speedscale, specializing in Kubernetes and cloud native technologies. • 9 posts published
eBPF: Preventing Garbage HTTP Payloads When Reading Kernel Scatter-Gather Buffers
How our nettap eBPF agent produced garbage HTTP bodies from kernel iov_iter scatter-gather buffers, and the CO-RE plus task-local storage fix that made it correct.
10 Benefits of automated testing
After spending hours or even days manually testing your software, you may be wondering whether or not there's a better way. The good news? There is.
What I Learned From Building an eBPF-Based Traffic Capture Application
Building a targeted eBPF network traffic capture tool reveals why a general-purpose eBPF observability agent is exponentially harder.
Under the Hood with Go TLS and eBPF
There are many reasons why you might want to leverage eBPF for plaintext inspection of TLS traffic including security monitoring, debugging, traffic.
Is Your Main Agent Lying? Leverage Multi-agent Workflows to Improve Response Quality
Learn how to use Claude Code sub-agents to get a 'second opinion' from other LLMs and build more reliable AI applications.
Easy Cross-Platform cgo Builds
When I first started writing Go software a little over a decade ago, one of the features I found particularly intriguing was the ability to build...
What Is Shadow Traffic? All You Need to Know
Production traffic can often be unpredictable, and distinguishing genuine user interactions from mere noise becomes a pivotal step in comprehensively.
What does OOMKilled mean and how do I prevent it?
When creating production-level applications, enterprises want to ensure the high availability of services.
Try Speedscale free
Choose the desktop proxymock or the hosted cloud trial to get started.