A technology that allows running sandboxed programs in the Linux kernel for observability, networking, and security.