How GitHub uses eBPF to improve deployment safety
Summary
GitHub describes using eBPF to detect and prevent circular dependencies in deployment tooling by per-process network filtering via cgroups, including DNS-based blocking to reroute queries through a DNS proxy for auditing. The post provides a practical PoC using cilium/ebpf and discusses outcomes like more stable deployments and faster MTTR.