Top all-time · #6544
Pixie Labs Blog
Company blog · blog.px.devsystemsprogramming
Pixie Labs Blog is the company blog at blog.px.dev, writing about systems and programming. Since 2021, 11 different Hacker News readers have linked it 43 times, most often “Open sourcing Pixie under Apache 2.0 license”. It is still writing: the last post was on 2025-01-06, and you can follow it by feed.
Too few sampled comments (9) to say how often HN recommends it.?
Why HN links it
Linked for articles on eBPF tracing, especially capturing TLS traffic by tracing OpenSSL, plus the post announcing Pixie's open-source release. Commenters cite them as references rather than judging them.
Summarised by Claude from a sample of 9 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Pixie Blog
Most-linked posts?
- Open sourcing Pixie under Apache 2.0 license2 people · 3 mentions · first linked 2021-05-04
- Where are my container's files? Inspecting container filesystems2 people · 3 mentions · first linked 2021-11-05
- OSS projects: you probably don't need to roll your own auth2 people · 2 mentions · first linked 2021-10-03
- Did I get owned by Log4Shell?2 people · 2 mentions · first linked 2021-12-11
- Tracing SSL/TLS connections using eBPF2 people · 2 mentions · first linked 2021-09-16
- /ebpf-tls-tracing-past-present-future/2 people · 2 mentions · first linked 2025-02-04
- Dumpster diving the Go garbage collector2 people · 2 mentions · first linked 2022-02-02
- Observing HTTP/2 Traffic Is Hard, but eBPF Can Help2 people · 2 mentions · first linked 2022-01-20
What Hacker News says?
eBPF TLS tracing: The Past, Present and Future https://blog.px.dev/ebpf-tls-tracing-past-present-future/
Comment linking /ebpf-tls-tracing-past-present-future/
on “Httptap: View HTTP/HTTPS requests made by any Linux program”Submitted Detecting Monero Miners with Bpftrace as a story · 192 points
HN discussionIt seems that with ebpf you can read data before TLS encryption : Debugging with eBPF Part 3: Tracing SSL/TLS connections https://blog.px.dev/ebpf-openssl-tracing/
Comment linking /ebpf-openssl-tracing/
on “Cracking Meta's Messenger Certificate Pinning on macOS”Submitted Tracing SSL/TLS connections using eBPF as a story · 136 points
HN discussionThe approach you describe above is common for similar projects: - Pixie ( https://px.dev ) -- which I contribute to - Beyla ( https://github.com/grafana/beyla ) - Coroot ( https://github.com/coroot/coroot ) If you are interested in the details and how the strategy for this tracing has evolved, you can learn more in this blog ( https://blog.px.dev/ebpf-tls-tracing-past-present-future/ ).
Comment linking /ebpf-tls-tracing-past-present-future/
on “Show HN: Subtrace – Wireshark for Docker Containers”Submitted Open sourcing Pixie under Apache 2.0 license as a story · 108 points
HN discussionCongratulations on Kratos coming out of Beta. We evaluated Ory a few months ago. My understanding: 1. Ory Kratos provides session-based authentication and user management. 2. Ory Hydra is a self-managed server that secures access to your applications and APIs with OAuth 2.0 and OpenID Connect. Basically we want to replace AWS Cognito (which is pretty much abandonware) to secure our API so we needed both applications…
Comment linking /open-source-auth/
on “Show HN: Ory Kratos – Open-source identity server written in Go”Submitted Observing HTTP/2 Traffic Is Hard, but eBPF Can Help as a story · 91 points
HN discussionAnother article about eBPF and TLS : "Debugging with eBPF Part 3: Tracing SSL/TLS connections" https://blog.px.dev/ebpf-openssl-tracing
Comment linking /ebpf-openssl-tracing
on “When eBPF meets TLS. Defeating TLS encryption with eBPF tricks [pdf]”Submitted Dumpster diving the Go garbage collector as a story · 71 points
HN discussionCo-founder/CEO of Pixie here. Sharing our thoughts on why we are open sourcing Pixie: https://blog.px.dev/open-source-release/ . Too much of open source today is just vendors using it to promote paid services, without a community approach. Open-source should be vendor neutral and accessible to all. We used Apache 2.0 as our license and are committed to keep it that way. As part of this we are working on contributing…
Comment linking /open-source-release/
on “Pixie is now open source”Submitted A simple continuous cross-language (Go, Rust, C/C++) profiler written in eBPF as a story · 17 points
HN discussionPixie lead maintainer here. We’re excited to license Pixie under Apache 2.0 to make it more accessible to people. More about the project and decision can be found in our blog post: https://blog.px.dev/open-source-release/ Happy to answer any questions here!
Comment linking /open-source-release/
on “New Relic open sources Pixie, its Kubernetes in-cluster observability platform”Submitted Obscure challenges supporting Kubernetes 1.22 in Pixie as a story · 15 points
HN discussionDefinitely agree. As I've looked into instrumentation/tracing, it has helped me more fearlessly look at the kernel. Ftrace is another tool that's helped me level up as well ( https://blog.px.dev/ebpf-probes-and-you/ )
Comment linking /ebpf-probes-and-you/
on “List Any Linux Tracepoint with Their Arguments, Datatypes and Related Structs”Submitted Tables Are Hard, Part 3: Streaming Data as a story · 13 points
HN discussionIt’s done via uprobes which allows ebpf to attach to users processes or libraries, basically like ld_preload but built into the kernel. First link that explains it https://blog.quarkslab.com/defeating-ebpf-uprobe-monitoring.... but there are many more links about it and it is a pretty useful tool for debugging in prod environments. (Also first link: https://blog.px.dev/ebpf-function-tracing/ ) this also the intended…
Comment linking /ebpf-function-tracing/
on “What I learned by putting GitHub Copilot behind a MitM proxy”Submitted Dumpster diving the Go garbage collector as a story · 13 points
HN discussionSubmitted Adding E2E Encryption for Proxied Data as a story · 11 points
HN discussionSubmitted The Challenge with Deploying eBPF into the Wild as a story · 10 points
HN discussionSubmitted Building an Always-On CPU Profiler as a story · 10 points
HN discussionSubmitted Faster React Apps with Memoization as a story · 9 points
HN discussionSubmitted eBPF TLS Tracing: The Past, Present and Future as a story · 5 points
HN discussionSubmitted Tables Are Hard, Part 2: Building a Simple Data Table in React as a story · 5 points
HN discussionSubmitted Distributed Bpftrace with Pixie as a story · 4 points
HN discussionSubmitted Horizontal Pod Autoscaling with Custom Metrics in Kubernetes as a story · 4 points
HN discussionSubmitted Automate Canary Analysis on Kubernetes with Argo as a story · 3 points
HN discussionSubmitted Did I get owned by Log4Shell? as a story · 3 points
HN discussionSubmitted Tables are Hard, Part 1: History as a story · 3 points
HN discussionSubmitted Building K8s native SaaS apps: iterate quickly with in-cluster data planes as a story · 3 points
HN discussion