Dropping eBPF CPU Cost by About 90% With Memoization (Not AI Gen)
Summary
The article explains how memoization can drastically reduce CPU usage in an eBPF-based security agent by caching the applicable policy per inode. It covers cache key design, an inode-based LRU cache, performance results, and edge cases like hardlinks, plus open-sourcing the repository.