---
title: "Discussion on \"Squeezing Bytes: How I Optimised an eBPF Driver in Falco\" | Hashnode"
description: "Discussion on \"Squeezing Bytes: How I Optimised an eBPF Driver in Falco\". How tracking down a packed struct alignment gap in Clang allowed me to eliminate 32 BPF instructions per invocation in Falco's modern BPF driver."
url: "https://hashnode.com/posts/squeezing-bytes-how-i-optimised-an-ebpf-driver-in-falco/6a36669afc16c25dc3a5d1cc"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Squeezing Bytes: How I Optimised an eBPF Driver in Falco](https://ravindu-priyankara.hashnode.dev/squeezing-bytes-how-i-optimised-an-ebpf-driver-in-falco?utm_source=hashnode&utm_medium=feed)

How tracking down a packed struct alignment gap in Clang allowed me to eliminate 32 BPF instructions per invocation in Falco's modern BPF driver.

Jun 20 · 9 min read · ravindu-priyankara.hashnode.dev  
Read the article

-   [#ebpf](https://hashnode.com/tag/ebpf)
-   [#linux-kernel](https://hashnode.com/tag/linux-kernel)
-   [#bytecode](https://hashnode.com/tag/bytecode)
-   [#optimization](https://hashnode.com/tag/optimization)
-   [#opensource](https://hashnode.com/tag/opensource)
-   [#assembly](https://hashnode.com/tag/assembly)

## Written by

[Ravidu Priyankara](https://hashnode.com/@ravindupriyankara)

@ravindupriyankara

  
[View profile](https://hashnode.com/@ravindupriyankara)

The compiler hates me.

System internals and kernel space. Nothing else to see here.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.