Join + to this topic. I'm also disappointed that this option is missing. I've been a fan of EBPF for many years, and now I've discovered it's missing from my Unraid. I wouldn't want to run a virtual machine just for this feature :( 1. Coroot monitoring - https://github.com/coroot/coroot coroot agent note use ebpf for trace / observability 2. Cillium in k3s docker image cillium use ebpf.