diff --git a/BUILD.bazel b/BUILD.bazel
index f8eaaa4643..b2a453e0c9 100644
--- a/BUILD.bazel
+++ b/BUILD.bazel
@@ -61,6 +61,7 @@ LINKOPTS = [
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory",
         "-Wl,-U,_ProfilerStart",
         "-Wl,-U,_ProfilerStop",
+        "-Wl,-U,__Z13GetStackTracePPvii",
         "-Wl,-U,_RegisterThriftProtocol",
     ],
     "//conditions:default": [
@@ -212,6 +213,7 @@ BUTIL_SRCS = [
     "src/butil/crc32c.cc",
     "src/butil/containers/case_ignored_flat_map.cpp",
     "src/butil/iobuf.cpp",
+    "src/butil/iobuf_profiler.cpp",
     "src/butil/binary_printer.cpp",
     "src/butil/recordio.cc",
     "src/butil/popen.cpp",
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 4bf116b6c7..4e753ead17 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -278,7 +278,8 @@ elseif(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 # for *.so
@@ -400,6 +401,7 @@ set(BUTIL_SOURCES
     ${PROJECT_SOURCE_DIR}/src/butil/crc32c.cc
     ${PROJECT_SOURCE_DIR}/src/butil/containers/case_ignored_flat_map.cpp
     ${PROJECT_SOURCE_DIR}/src/butil/iobuf.cpp
+    ${PROJECT_SOURCE_DIR}/src/butil/iobuf_profiler.cpp
     ${PROJECT_SOURCE_DIR}/src/butil/binary_printer.cpp
     ${PROJECT_SOURCE_DIR}/src/butil/recordio.cc
     ${PROJECT_SOURCE_DIR}/src/butil/popen.cpp
diff --git a/Makefile b/Makefile
index 0ed8a352c2..da6ac9f49b 100644
--- a/Makefile
+++ b/Makefile
@@ -163,6 +163,7 @@ BUTIL_SOURCES = \
     src/butil/crc32c.cc \
     src/butil/containers/case_ignored_flat_map.cpp \
     src/butil/iobuf.cpp \
+    src/butil/iobuf_profiler.cpp \
     src/butil/binary_printer.cpp \
     src/butil/recordio.cc \
     src/butil/popen.cpp
diff --git a/config_brpc.sh b/config_brpc.sh
index a660171c4a..7e459b75cb 100755
--- a/config_brpc.sh
+++ b/config_brpc.sh
@@ -196,6 +196,7 @@ if [ "$SYSTEM" = "Darwin" ]; then
 	DYNAMIC_LINKINGS="$DYNAMIC_LINKINGS -Wl,-U,_MallocExtension_ReleaseFreeMemory"
 	DYNAMIC_LINKINGS="$DYNAMIC_LINKINGS -Wl,-U,_ProfilerStart"
 	DYNAMIC_LINKINGS="$DYNAMIC_LINKINGS -Wl,-U,_ProfilerStop"
+	DYNAMIC_LINKINGS="$DYNAMIC_LINKINGS -Wl,-U,__Z13GetStackTracePPvii"
 	DYNAMIC_LINKINGS="$DYNAMIC_LINKINGS -Wl,-U,_RegisterThriftProtocol"
 fi
 append_linking() {
diff --git a/example/asynchronous_echo_c++/CMakeLists.txt b/example/asynchronous_echo_c++/CMakeLists.txt
index 1c8da4e57c..60854454e2 100644
--- a/example/asynchronous_echo_c++/CMakeLists.txt
+++ b/example/asynchronous_echo_c++/CMakeLists.txt
@@ -129,7 +129,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(asynchronous_echo_client client.cpp ${PROTO_SRC})
diff --git a/example/auto_concurrency_limiter/CMakeLists.txt b/example/auto_concurrency_limiter/CMakeLists.txt
index 213b357b5d..c19a8f4001 100644
--- a/example/auto_concurrency_limiter/CMakeLists.txt
+++ b/example/auto_concurrency_limiter/CMakeLists.txt
@@ -123,6 +123,7 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
         "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii"
         "-Wl,-U,_RegisterThriftProtocol")
 endif()
 
diff --git a/example/backup_request_c++/CMakeLists.txt b/example/backup_request_c++/CMakeLists.txt
index 5a520a4dcf..7aab5e5768 100644
--- a/example/backup_request_c++/CMakeLists.txt
+++ b/example/backup_request_c++/CMakeLists.txt
@@ -129,7 +129,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(backup_request_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/bthread_tag_echo_c++/CMakeLists.txt b/example/bthread_tag_echo_c++/CMakeLists.txt
index 2baea53e3d..56aec0df5d 100644
--- a/example/bthread_tag_echo_c++/CMakeLists.txt
+++ b/example/bthread_tag_echo_c++/CMakeLists.txt
@@ -135,7 +135,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(echo_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/cancel_c++/CMakeLists.txt b/example/cancel_c++/CMakeLists.txt
index c8f4d7f381..07d80b4c4a 100644
--- a/example/cancel_c++/CMakeLists.txt
+++ b/example/cancel_c++/CMakeLists.txt
@@ -129,7 +129,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(cancel_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/cascade_echo_c++/CMakeLists.txt b/example/cascade_echo_c++/CMakeLists.txt
index 56248abd29..b6d8c0b75f 100644
--- a/example/cascade_echo_c++/CMakeLists.txt
+++ b/example/cascade_echo_c++/CMakeLists.txt
@@ -128,7 +128,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(cascade_echo_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/dynamic_partition_echo_c++/CMakeLists.txt b/example/dynamic_partition_echo_c++/CMakeLists.txt
index dbe7addad4..2394b7fc34 100644
--- a/example/dynamic_partition_echo_c++/CMakeLists.txt
+++ b/example/dynamic_partition_echo_c++/CMakeLists.txt
@@ -135,7 +135,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(dynamic_partition_echo_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/echo_c++/CMakeLists.txt b/example/echo_c++/CMakeLists.txt
index badd49e187..7746957b17 100644
--- a/example/echo_c++/CMakeLists.txt
+++ b/example/echo_c++/CMakeLists.txt
@@ -129,7 +129,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(echo_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/grpc_c++/CMakeLists.txt b/example/grpc_c++/CMakeLists.txt
index c1d0817aed..516735d6ec 100644
--- a/example/grpc_c++/CMakeLists.txt
+++ b/example/grpc_c++/CMakeLists.txt
@@ -129,6 +129,7 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
         "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii"
         "-Wl,-U,_RegisterThriftProtocol")
 endif()
 
diff --git a/example/http_c++/CMakeLists.txt b/example/http_c++/CMakeLists.txt
index 8d0507d2a5..3fd9a088a3 100644
--- a/example/http_c++/CMakeLists.txt
+++ b/example/http_c++/CMakeLists.txt
@@ -136,7 +136,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(http_client http_client.cpp)
diff --git a/example/memcache_c++/CMakeLists.txt b/example/memcache_c++/CMakeLists.txt
index 4f3c2ed182..5941c344cd 100644
--- a/example/memcache_c++/CMakeLists.txt
+++ b/example/memcache_c++/CMakeLists.txt
@@ -129,7 +129,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(memcache_client client.cpp)
diff --git a/example/multi_threaded_echo_c++/CMakeLists.txt b/example/multi_threaded_echo_c++/CMakeLists.txt
index a3c47a35ff..c13b34bdde 100644
--- a/example/multi_threaded_echo_c++/CMakeLists.txt
+++ b/example/multi_threaded_echo_c++/CMakeLists.txt
@@ -135,7 +135,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(echo_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/multi_threaded_echo_fns_c++/CMakeLists.txt b/example/multi_threaded_echo_fns_c++/CMakeLists.txt
index 7907774364..887541b8fd 100644
--- a/example/multi_threaded_echo_fns_c++/CMakeLists.txt
+++ b/example/multi_threaded_echo_fns_c++/CMakeLists.txt
@@ -135,7 +135,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(multi_threaded_echo_fns_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/nshead_extension_c++/CMakeLists.txt b/example/nshead_extension_c++/CMakeLists.txt
index 0c3d18ab5b..6ddf382671 100644
--- a/example/nshead_extension_c++/CMakeLists.txt
+++ b/example/nshead_extension_c++/CMakeLists.txt
@@ -129,7 +129,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(nshead_extension_client client.cpp)
diff --git a/example/nshead_pb_extension_c++/CMakeLists.txt b/example/nshead_pb_extension_c++/CMakeLists.txt
index 005840e6fd..8d0edf6030 100644
--- a/example/nshead_pb_extension_c++/CMakeLists.txt
+++ b/example/nshead_pb_extension_c++/CMakeLists.txt
@@ -129,7 +129,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(nshead_pb_extension_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/parallel_echo_c++/CMakeLists.txt b/example/parallel_echo_c++/CMakeLists.txt
index d668ed43c9..5bd081836e 100644
--- a/example/parallel_echo_c++/CMakeLists.txt
+++ b/example/parallel_echo_c++/CMakeLists.txt
@@ -135,7 +135,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(parallel_echo_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/partition_echo_c++/CMakeLists.txt b/example/partition_echo_c++/CMakeLists.txt
index 1d770a985c..636e19b431 100644
--- a/example/partition_echo_c++/CMakeLists.txt
+++ b/example/partition_echo_c++/CMakeLists.txt
@@ -135,7 +135,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/rdma_performance/CMakeLists.txt b/example/rdma_performance/CMakeLists.txt
index 226aa170eb..0fe0fe20b6 100644
--- a/example/rdma_performance/CMakeLists.txt
+++ b/example/rdma_performance/CMakeLists.txt
@@ -135,7 +135,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/redis_c++/CMakeLists.txt b/example/redis_c++/CMakeLists.txt
index 14dc839a97..1447e60698 100644
--- a/example/redis_c++/CMakeLists.txt
+++ b/example/redis_c++/CMakeLists.txt
@@ -139,7 +139,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(redis_cli redis_cli.cpp)
diff --git a/example/selective_echo_c++/CMakeLists.txt b/example/selective_echo_c++/CMakeLists.txt
index ca39217f76..4b304fb6c0 100644
--- a/example/selective_echo_c++/CMakeLists.txt
+++ b/example/selective_echo_c++/CMakeLists.txt
@@ -135,7 +135,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(selective_echo_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/session_data_and_thread_local/CMakeLists.txt b/example/session_data_and_thread_local/CMakeLists.txt
index bfadec79ea..3678ab761d 100644
--- a/example/session_data_and_thread_local/CMakeLists.txt
+++ b/example/session_data_and_thread_local/CMakeLists.txt
@@ -136,7 +136,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(session_data_and_thread_local_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/example/streaming_echo_c++/CMakeLists.txt b/example/streaming_echo_c++/CMakeLists.txt
index 29ffcb1692..ca4579d308 100644
--- a/example/streaming_echo_c++/CMakeLists.txt
+++ b/example/streaming_echo_c++/CMakeLists.txt
@@ -129,7 +129,8 @@ if(CMAKE_SYSTEM_NAME STREQUAL "Darwin")
         "-framework Foundation"
         "-Wl,-U,_MallocExtension_ReleaseFreeMemory"
         "-Wl,-U,_ProfilerStart"
-        "-Wl,-U,_ProfilerStop")
+        "-Wl,-U,_ProfilerStop"
+        "-Wl,-U,__Z13GetStackTracePPvii")
 endif()
 
 add_executable(streaming_echo_client client.cpp ${PROTO_SRC} ${PROTO_HEADER})
diff --git a/src/brpc/builtin/common.cpp b/src/brpc/builtin/common.cpp
index 9cdc72fee6..7b5d33a348 100644
--- a/src/brpc/builtin/common.cpp
+++ b/src/brpc/builtin/common.cpp
@@ -308,6 +308,7 @@ const char* ProfilingType2String(ProfilingType t) {
     case PROFILING_HEAP: return "heap";
     case PROFILING_GROWTH: return "growth";
     case PROFILING_CONTENTION: return "contention";
+    case PROFILING_IOBUF: return "iobuf";
     }
     return "unknown";
 }
diff --git a/src/brpc/builtin/common.h b/src/brpc/builtin/common.h
index f4d6962729..5fd8a9c98e 100644
--- a/src/brpc/builtin/common.h
+++ b/src/brpc/builtin/common.h
@@ -52,6 +52,7 @@ enum ProfilingType {
     PROFILING_HEAP = 1,
     PROFILING_GROWTH = 2,
     PROFILING_CONTENTION = 3,
+    PROFILING_IOBUF = 4,
 };
 
 DECLARE_string(rpc_profiling_dir);
diff --git a/src/brpc/builtin/hotspots_service.cpp b/src/brpc/builtin/hotspots_service.cpp
index b70266f49f..c01ce536d7 100644
--- a/src/brpc/builtin/hotspots_service.cpp
+++ b/src/brpc/builtin/hotspots_service.cpp
@@ -23,6 +23,7 @@
 #include "butil/file_util.h"                     // butil::FilePath
 #include "butil/popen.h"                         // butil::read_command_output
 #include "butil/fd_guard.h"                      // butil::fd_guard
+#include "butil/iobuf_profiler.h"
 #include "brpc/log.h"
 #include "brpc/controller.h"
 #include "brpc/server.h"
@@ -154,7 +155,8 @@ struct ProfilingEnvironment {
 };
 
 // Different ProfilingType have different env.
-static ProfilingEnvironment g_env[4] = {
+static ProfilingEnvironment g_env[5] = {
+    { PTHREAD_MUTEX_INITIALIZER, 0, NULL, NULL, NULL },
     { PTHREAD_MUTEX_INITIALIZER, 0, NULL, NULL, NULL },
     { PTHREAD_MUTEX_INITIALIZER, 0, NULL, NULL, NULL },
     { PTHREAD_MUTEX_INITIALIZER, 0, NULL, NULL, NULL },
@@ -399,7 +401,8 @@ static bool has_GOOGLE_PPROF_BINARY_PATH() {
 static void DisplayResult(Controller* cntl,
                           google::protobuf::Closure* done,
                           const char* prof_name,
-                          const butil::IOBuf& result_prefix) {
+                          const butil::IOBuf& result_prefix,
+                          ProfilingType type) {
     ClosureGuard done_guard(done);
     butil::IOBuf prof_result;
     if (cntl->IsCanceled()) {
@@ -488,7 +491,7 @@ static void DisplayResult(Controller* cntl,
 #if defined(OS_LINUX)
     cmd_builder << "perl " << pprof_tool
                 << DisplayTypeToPProfArgument(display_type)
-                << (show_ccount ? " --contention " : "");
+                << ((show_ccount || type == PROFILING_IOBUF) ? " --contention " : "");
     if (base_name) {
         cmd_builder << "--base " << *base_name << ' ';
     }
@@ -505,7 +508,7 @@ static void DisplayResult(Controller* cntl,
 #elif defined(OS_MACOSX)
     cmd_builder << s_pprof_binary_path << " "
                 << DisplayTypeToPProfArgument(display_type)
-                << (show_ccount ? " -contentions " : "");
+                << ((show_ccount || type == PROFILING_IOBUF) ? " --contention " : "");
     if (base_name) {
         cmd_builder << "-base " << *base_name << ' ';
     }
@@ -637,7 +640,7 @@ static void DoProfiling(ProfilingType type,
             return cntl->SetFailed(
                 EINVAL, "The profile denoted by `view' does not exist");
         }
-        DisplayResult(cntl, done_guard.release(), view->c_str(), os.buf());
+        DisplayResult(cntl, done_guard.release(), view->c_str(), os.buf(), type);
         return;
     }
 
@@ -774,6 +777,15 @@ static void DoProfiling(ProfilingType type,
             PLOG(WARNING) << "Profiling has been interrupted";
         }
         bthread::ContentionProfilerStop();
+    } else if (type == PROFILING_IOBUF) {
+        if (!butil::IsIOBufProfilerEnabled()) {
+            os << "IOBuf profiler is not enabled"
+               << (use_html ? "</body></html>" : "\n");
+            os.move_to(resp);
+            cntl->http_response().set_status_code(HTTP_STATUS_FORBIDDEN);
+            return NotifyWaiters(type, cntl, view);
+        }
+        butil::IOBufProfilerFlush(prof_name);
     } else if (type == PROFILING_HEAP) {
         MallocExtension* malloc_ext = MallocExtension::instance();
         if (malloc_ext == NULL || !has_TCMALLOC_SAMPLE_PARAMETER()) {
@@ -827,11 +839,11 @@ static void DoProfiling(ProfilingType type,
     std::vector<ProfilingWaiter> waiters;
     // NOTE: Must be called before DisplayResult which calls done->Run() and
     // deletes cntl.
-    ConsumeWaiters(type, cntl, &waiters);    
-    DisplayResult(cntl, done_guard.release(), prof_name, os.buf());
+    ConsumeWaiters(type, cntl, &waiters);
+    DisplayResult(cntl, done_guard.release(), prof_name, os.buf(), type);
 
     for (size_t i = 0; i < waiters.size(); ++i) {
-        DisplayResult(waiters[i].cntl, waiters[i].done, prof_name, os.buf());
+        DisplayResult(waiters[i].cntl, waiters[i].done, prof_name, os.buf(), type);
     }
 }
 
@@ -849,7 +861,12 @@ static void StartProfiling(ProfilingType type,
         enabled = cpu_profiler_enabled;
     } else if (type == PROFILING_CONTENTION) {
         enabled = true;
-    } else if (type == PROFILING_HEAP) {
+    } else if (type == PROFILING_IOBUF) {
+        enabled = butil::IsIOBufProfilerEnabled();
+        if (!enabled) {
+            extra_desc = " (no ENABLE_IOBUF_PROFILER=1 in env or no link tcmalloc )";
+        }
+    }  else if (type == PROFILING_HEAP) {
         enabled = IsHeapProfilerEnabled();
         if (enabled && !has_TCMALLOC_SAMPLE_PARAMETER()) {
             enabled = false;
@@ -925,7 +942,8 @@ static void StartProfiling(ProfilingType type,
         "<script type=\"text/javascript\">\n"
         "function generateURL() {\n"
         "  var past_prof = document.getElementById('view_prof').value;\n"
-        "  var base_prof = document.getElementById('base_prof').value;\n"
+          "  var base_prof_el = document.getElementById('base_prof');\n"
+          "  var base_prof = base_prof_el != null ? base_prof_el.value : '';\n"
         "  var display_type = document.getElementById('display_type').value;\n";
     if (type == PROFILING_CONTENTION) {
         os << "  var show_ccount = document.getElementById('ccount_cb').checked;\n";
@@ -1092,17 +1110,19 @@ static void StartProfiling(ProfilingType type,
            << (show_ccount ? " checked=''" : "") <<
             " onclick='onChangedCB(this);'>count</label>";
     }
-    os << "</div><div><pre style='display:inline'>Diff: </pre>"
-        "<select id='base_prof' onchange='onSelectProf()'>"
-        "<option value=''>&lt;none&gt;</option>";
-    for (size_t i = 0; i < past_profs.size(); ++i) {
-        os << "<option value='" << past_profs[i] << "' ";
-        if (base_name != NULL && past_profs[i] == *base_name) {
-            os << "selected";
+    if (type != PROFILING_IOBUF) {
+        os << "</div><div><pre style='display:inline'>Diff: </pre>"
+              "<select id='base_prof' onchange='onSelectProf()'>"
+              "<option value=''>&lt;none&gt;</option>";
+        for (size_t i = 0; i<past_profs.size(); ++i) {
+            os << "<option value='" << past_profs[i] << "' ";
+            if (base_name!=NULL && past_profs[i]==*base_name) {
+                os << "selected";
+            }
+            os << '>' << GetBaseName(&past_profs[i]);
         }
-        os << '>' << GetBaseName(&past_profs[i]);
+        os << "</select></div>";
     }
-    os << "</select></div>";
     
     if (!enabled && view == NULL) {
         os << "<p><span style='color:red'>Error:</span> "
@@ -1194,6 +1214,14 @@ void HotspotsService::contention(
     return StartProfiling(PROFILING_CONTENTION, cntl_base, done);
 }
 
+void HotspotsService::iobuf(::google::protobuf::RpcController* cntl_base,
+    const ::brpc::HotspotsRequest* request,
+    ::brpc::HotspotsResponse* response,
+    ::google::protobuf::Closure* done) {
+    return StartProfiling(PROFILING_IOBUF, cntl_base, done);
+}
+
+
 void HotspotsService::cpu_non_responsive(
     ::google::protobuf::RpcController* cntl_base,
     const ::brpc::HotspotsRequest*,
@@ -1226,19 +1254,33 @@ void HotspotsService::contention_non_responsive(
     return DoProfiling(PROFILING_CONTENTION, cntl_base, done);
 }
 
+void HotspotsService::iobuf_non_responsive(::google::protobuf::RpcController* cntl_base,
+    const ::brpc::HotspotsRequest* request,
+    ::brpc::HotspotsResponse* response,
+    ::google::protobuf::Closure* done) {
+    return DoProfiling(PROFILING_IOBUF, cntl_base, done);
+}
+
 void HotspotsService::GetTabInfo(TabInfoList* info_list) const {
     TabInfo* info = info_list->add();
     info->path = "/hotspots/cpu";
     info->tab_name = "cpu";
+
     info = info_list->add();
     info->path = "/hotspots/heap";
     info->tab_name = "heap";
+
     info = info_list->add();
     info->path = "/hotspots/growth";
     info->tab_name = "growth";
+
     info = info_list->add();
     info->path = "/hotspots/contention";
     info->tab_name = "contention";
+
+    info = info_list->add();
+    info->path = "/hotspots/iobuf";
+    info->tab_name = "iobuf";
 }
 
 } // namespace brpc
diff --git a/src/brpc/builtin/hotspots_service.h b/src/brpc/builtin/hotspots_service.h
index 23696eec0d..cdd90b6bd3 100644
--- a/src/brpc/builtin/hotspots_service.h
+++ b/src/brpc/builtin/hotspots_service.h
@@ -50,6 +50,11 @@ class HotspotsService : public hotspots, public Tabbed {
                     ::brpc::HotspotsResponse* response,
                     ::google::protobuf::Closure* done);
 
+    void iobuf(::google::protobuf::RpcController* cntl_base,
+               const ::brpc::HotspotsRequest* request,
+               ::brpc::HotspotsResponse* response,
+               ::google::protobuf::Closure* done);
+
     void cpu_non_responsive(::google::protobuf::RpcController* cntl_base,
                             const ::brpc::HotspotsRequest* request,
                             ::brpc::HotspotsResponse* response,
@@ -70,6 +75,11 @@ class HotspotsService : public hotspots, public Tabbed {
                                    ::brpc::HotspotsResponse* response,
                                    ::google::protobuf::Closure* done);
 
+    void iobuf_non_responsive(::google::protobuf::RpcController* cntl_base,
+                              const ::brpc::HotspotsRequest* request,
+                              ::brpc::HotspotsResponse* response,
+                              ::google::protobuf::Closure* done);
+
     void GetTabInfo(brpc::TabInfoList*) const;
 };
 
diff --git a/src/brpc/builtin/pprof_perl.cpp b/src/brpc/builtin/pprof_perl.cpp
index 1ea5903b9d..2749fa3107 100644
--- a/src/brpc/builtin/pprof_perl.cpp
+++ b/src/brpc/builtin/pprof_perl.cpp
@@ -4172,7 +4172,8 @@ const char* pprof_perl() {
         "\n"
         "  while ( $line = <PROFILE> ) {\n"
         "    $line =~ s/\\r//g;      # turn windows-looking lines into unix-looking lines\n"
-        "    if ( $line =~ /^\\s*(\\d+)\\s+(\\d+) \\@\\s*(.*?)\\s*$/ ) {\n"
+        "    # Support negative count for IOBuf Profiler\n"
+        "    if ( $line =~ /^\\s*(\\d+)\\s+(-?\\d+) \\@\\s*(.*?)\\s*$/ ) {\n"
         "      my ($cycles, $count, $stack) = ($1, $2, $3);\n"
         "\n"
         "      # Convert cycles to nanoseconds\n"
diff --git a/src/brpc/builtin_service.proto b/src/brpc/builtin_service.proto
index ab58a4f893..e4c236d320 100644
--- a/src/brpc/builtin_service.proto
+++ b/src/brpc/builtin_service.proto
@@ -147,6 +147,8 @@ service hotspots {
     rpc growth_non_responsive(HotspotsRequest) returns (HotspotsResponse);
     rpc contention(HotspotsRequest) returns (HotspotsResponse);
     rpc contention_non_responsive(HotspotsRequest) returns (HotspotsResponse);
+    rpc iobuf(HotspotsRequest) returns (HotspotsResponse);
+    rpc iobuf_non_responsive(HotspotsRequest) returns (HotspotsResponse);
 }
 
 service flags {
diff --git a/src/butil/iobuf.cpp b/src/butil/iobuf.cpp
index 169e76ce02..e0f1af3447 100644
--- a/src/butil/iobuf.cpp
+++ b/src/butil/iobuf.cpp
@@ -38,6 +38,7 @@
 #include "butil/logging.h"                  // CHECK, LOG
 #include "butil/fd_guard.h"                 // butil::fd_guard
 #include "butil/iobuf.h"
+#include "butil/iobuf_profiler.h"
 
 namespace butil {
 namespace iobuf {
@@ -155,7 +156,7 @@ inline iov_function get_pwritev_func() {
 
 #endif  // ARCH_CPU_X86_64
 
-inline void* cp(void *__restrict dest, const void *__restrict src, size_t n) {
+void* cp(void *__restrict dest, const void *__restrict src, size_t n) {
     // memcpy in gcc 4.8 seems to be faster enough.
     return memcpy(dest, src, n);
 }
@@ -188,7 +189,8 @@ size_t IOBuf::new_bigview_count() {
     return iobuf::g_newbigview.load(butil::memory_order_relaxed);
 }
 
-const uint16_t IOBUF_BLOCK_FLAGS_USER_DATA = 0x1;
+const uint16_t IOBUF_BLOCK_FLAGS_USER_DATA = 1 << 0;
+const uint16_t IOBUF_BLOCK_FLAGS_SAMPLED = 1 << 1;
 typedef void (*UserDataDeleter)(void*);
 
 struct UserDataExtension {
@@ -223,6 +225,9 @@ struct IOBuf::Block {
         iobuf::g_nblock.fetch_add(1, butil::memory_order_relaxed);
         iobuf::g_blockmem.fetch_add(data_size + sizeof(Block),
                                     butil::memory_order_relaxed);
+        if (is_samplable()) {
+            SubmitIOBufSample(this, 1);
+        }
     }
 
     Block(char* data_in, uint32_t data_size, UserDataDeleter deleter)
@@ -234,6 +239,9 @@ struct IOBuf::Block {
         , u({0})
         , data(data_in) {
         get_user_data_extension()->deleter = deleter;
+        if (is_samplable()) {
+            SubmitIOBufSample(this, 1);
+        }
     }
 
     // Undefined behavior when (flags & IOBUF_BLOCK_FLAGS_USER_DATA) is 0.
@@ -254,24 +262,31 @@ struct IOBuf::Block {
     void inc_ref() {
         check_abi();
         nshared.fetch_add(1, butil::memory_order_relaxed);
+        if (sampled()) {
+            SubmitIOBufSample(this, 1);
+        }
     }
         
     void dec_ref() {
         check_abi();
+        if (sampled()) {
+            SubmitIOBufSample(this, -1);
+        }
         if (nshared.fetch_sub(1, butil::memory_order_release) == 1) {
             butil::atomic_thread_fence(butil::memory_order_acquire);
-            if (!flags) {
+            if (!is_user_data()) {
                 iobuf::g_nblock.fetch_sub(1, butil::memory_order_relaxed);
                 iobuf::g_blockmem.fetch_sub(cap + sizeof(Block),
                                             butil::memory_order_relaxed);
                 this->~Block();
                 iobuf::blockmem_deallocate(this);
-            } else if (flags & IOBUF_BLOCK_FLAGS_USER_DATA) {
+            } else {
                 get_user_data_extension()->deleter(data);
                 this->~Block();
                 free(this);
             }
         }
+
     }
 
     int ref_count() const {
@@ -280,6 +295,23 @@ struct IOBuf::Block {
 
     bool full() const { return size >= cap; }
     size_t left_space() const { return cap - size; }
+
+private:
+    bool is_samplable() {
+        if (IsIOBufProfilerSamplable()) {
+            flags |= IOBUF_BLOCK_FLAGS_SAMPLED;
+            return true;
+        }
+        return false;
+    }
+
+    bool sampled() const {
+        return flags & IOBUF_BLOCK_FLAGS_SAMPLED;
+    }
+
+    bool is_user_data() const {
+        return flags & IOBUF_BLOCK_FLAGS_USER_DATA;
+    }
 };
 
 namespace iobuf {
diff --git a/src/butil/iobuf_profiler.cpp b/src/butil/iobuf_profiler.cpp
new file mode 100644
index 0000000000..0eddd60608
--- /dev/null
+++ b/src/butil/iobuf_profiler.cpp
@@ -0,0 +1,385 @@
+// Licensed to the Apache Software Foundation (ASF) under one
+// or more contributor license agreements.  See the NOTICE file
+// distributed with this work for additional information
+// regarding copyright ownership.  The ASF licenses this file
+// to you under the Apache License, Version 2.0 (the
+// "License"); you may not use this file except in compliance
+// with the License.  You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing,
+// software distributed under the License is distributed on an
+// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+// KIND, either express or implied.  See the License for the
+// specific language governing permissions and limitations
+// under the License.
+
+#include <fcntl.h>
+#include "butil/iobuf_profiler.h"
+#include "butil/strings/string_number_conversions.h"
+#include "butil/file_util.h"
+#include "butil/fd_guard.h"
+#include "butil/fast_rand.h"
+#include "butil/hash.h"
+#include <execinfo.h>
+
+extern int __attribute__((weak)) GetStackTrace(void** result, int max_depth, int skip_count);
+
+namespace butil {
+
+namespace iobuf {
+extern void* cp(void *__restrict dest, const void *__restrict src, size_t n);
+}
+
+static pthread_once_t g_iobuf_profiler_info_once = PTHREAD_ONCE_INIT;
+static bool g_iobuf_profiler_enabled = false;
+static uint g_iobuf_profiler_sample_rate = 100;
+static void InitGlobalIOBufProfilerInfo() {
+    const char* enabled = getenv("ENABLE_IOBUF_PROFILER");
+    g_iobuf_profiler_enabled = enabled && strcmp("1", enabled) == 0 && ::GetStackTrace != NULL;
+
+    char* rate = getenv("IOBUF_PROFILER_SAMPLE_RATE");
+    if (rate) {
+        int tmp = 0;
+        if (butil::StringToInt(rate, &tmp)) {
+            if (tmp > 0 && tmp <= 100) {
+                g_iobuf_profiler_sample_rate = tmp;
+            } else {
+                LOG(ERROR) << "IOBUF_PROFILER_SAMPLE_RATE should be in (0, 100], but get " << rate;
+            }
+        } else {
+            LOG(ERROR) << "IOBUF_PROFILER_SAMPLE_RATE should be a number, but get " << rate;
+        }
+    }
+    LOG(INFO) << "g_iobuf_profiler_sample_rate=" << g_iobuf_profiler_sample_rate;
+}
+
+bool IsIOBufProfilerEnabled() {
+    pthread_once(&g_iobuf_profiler_info_once, InitGlobalIOBufProfilerInfo);
+    return g_iobuf_profiler_enabled;
+}
+
+bool IsIOBufProfilerSamplable() {
+    pthread_once(&g_iobuf_profiler_info_once, InitGlobalIOBufProfilerInfo);
+    if (g_iobuf_profiler_sample_rate == 100) {
+        return true;
+    }
+    return fast_rand_less_than(100) + 1 <= g_iobuf_profiler_sample_rate;
+}
+
+IOBufSample* const IOBufSample::UNCONNECTED = (IOBufSample*)(intptr_t)-1;
+
+size_t IOBufSample::stack_hash_code() const {
+    if (nframes == 0) {
+        return 0;
+    }
+    if (_hash_code == 0) {
+        _hash_code = SuperFastHash(reinterpret_cast<const char*>(stack),
+                                   sizeof(void*) * nframes);
+    }
+    return _hash_code;
+}
+
+const uint32_t IOBufProfiler::MIN_SLEEP_MS = 10;
+const uint32_t IOBufProfiler::MAX_SLEEP_MS = 1000;
+
+IOBufProfiler* IOBufProfiler::GetInstance() {
+    return ::Singleton<IOBufProfiler, LeakySingletonTraits<IOBufProfiler>>::get();
+}
+
+IOBufProfiler::IOBufProfiler()
+    : butil::SimpleThread("IOBufProfiler")
+    , _stop(false)
+    , _sample_head(NULL)
+    , _cur_sample(NULL)
+    , _sleep_ms(MIN_SLEEP_MS) {
+    CHECK_EQ(0, _stack_map.init(1024));
+    CHECK_EQ(0, _block_info_map.init(1024));
+    Start();
+}
+
+IOBufProfiler::~IOBufProfiler() {
+    StopAndJoin();
+    _block_info_map.clear();
+    _stack_map.clear();
+    IOBufSample* sample = _cur_sample.load(butil::memory_order_relaxed);
+    if (sample) {
+        // Release all sample.
+        do {
+            // req was consumed, skip it.
+            if (sample->next != NULL) {
+                IOBufSample* const saved_req = sample;
+                sample = sample->next;
+                IOBufSample::Destroy(saved_req);
+            }
+        } while (!IsComplete(sample));
+        if (sample) {
+            IOBufSample::Destroy(sample);
+        }
+    }
+}
+
+void IOBufProfiler::Submit(IOBufSample* s) {
+    if (_stop.load(butil::memory_order_relaxed)) {
+        return;
+    }
+
+    s->next = IOBufSample::UNCONNECTED;
+    IOBufSample* const prev_head = _sample_head.exchange(
+        s, butil::memory_order_release);
+    if (prev_head) {
+        s->next = prev_head;
+        return;
+    }
+    s->next = NULL;
+    _cur_sample.store(s, butil::memory_order_release);
+}
+
+void IOBufProfiler::Dump(IOBufSample* s) {
+    do {
+        BAIDU_SCOPED_LOCK(_mutex);
+        // Categorize the stack.
+        IOBufRefSampleSharedPtr stack_sample;
+        IOBufRefSampleSharedPtr* stack_ptr = _stack_map.seek(s);
+        if (!stack_ptr) {
+            stack_sample = IOBufSample::CopyAndSharedWithDestroyer(s);
+            stack_sample->block = NULL;
+            stack_ptr = &_stack_map[stack_sample.get()];
+            *stack_ptr = stack_sample;
+        } else {
+            (*stack_ptr)->count += s->count;
+        }
+
+        BlockInfo* info = _block_info_map.seek(s->block);
+        if (info) {
+            // Categorize the IOBufSample.
+            info->stack_count_map[*stack_ptr] += s->count;
+            info->ref += s->count;
+            if (info->ref == 0) {
+                for (const auto& iter : info->stack_count_map) {
+                    IOBufRefSampleSharedPtr* stack_ptr2 = _stack_map.seek(iter.first.get());
+                    if (stack_ptr2 && *stack_ptr2) {
+                        (*stack_ptr2)->count -= iter.second;
+                        if ((*stack_ptr2)->count == 0) {
+                            _stack_map.erase(iter.first.get());
+                        }
+                    }
+                }
+                _block_info_map.erase(s->block);
+                break;
+            }
+        } else {
+            BlockInfo& new_info = _block_info_map[s->block];
+            new_info.ref += s->count;
+            CHECK_EQ(0, new_info.stack_count_map.init(64));
+            new_info.stack_count_map[*stack_ptr] = s->count;
+        }
+    } while (false);
+    s->block = NULL;
+}
+
+IOBufSample* IOBufSample::Copy(IOBufSample* ref) {
+    auto copied = IOBufSample::New();
+    copied->block = ref->block;
+    copied->count = ref->count;
+    copied->_hash_code = ref->_hash_code;
+    copied->nframes = ref->nframes;
+    iobuf::cp(copied->stack, ref->stack, sizeof(void*) * ref->nframes);
+    return copied;
+}
+
+IOBufRefSampleSharedPtr IOBufSample::CopyAndSharedWithDestroyer(IOBufSample* ref) {
+    return { Copy(ref), detail::Destroyer() };
+}
+
+void IOBufProfiler::Flush2Disk(const char* filename) {
+    if (!filename) {
+        LOG(ERROR) << "Parameter [filename] is NULL";
+        return;
+    }
+    // Serialize contentions in _stack_map into _disk_buf.
+    _disk_buf.append("--- contention\ncycles/second=1000000000\n");
+    butil::IOBufBuilder os;
+    {
+        BAIDU_SCOPED_LOCK(_mutex);
+        for (auto it = _stack_map.begin(); it != _stack_map.end(); ++it) {
+            const IOBufRefSampleSharedPtr& c = it->second;
+            if (c->nframes == 0) {
+                LOG_EVERY_SECOND(WARNING) << "Invalid stack with nframes=0, count=" << c->count;
+                continue;
+            }
+            os << "0 " << c->count << " @";
+            for (int i = 0; i < c->nframes; ++i) {
+                os << " " << c->stack[i];
+            }
+            os << "\n";
+        }
+    }
+    _disk_buf.append(os.buf().movable());
+
+    butil::IOPortal mem_maps;
+    const butil::fd_guard maps_fd(open("/proc/self/maps", O_RDONLY));
+    if (maps_fd >= 0) {
+        while (true) {
+            ssize_t nr = mem_maps.append_from_file_descriptor(maps_fd, 8192);
+            if (nr < 0) {
+                if (errno == EINTR) {
+                    continue;
+                }
+                PLOG(ERROR) << "Fail to read /proc/self/maps";
+                break;
+            }
+            if (nr == 0) {
+                _disk_buf.append(mem_maps);
+                break;
+            }
+        }
+    } else {
+        PLOG(ERROR) << "Fail to open /proc/self/maps";
+    }
+    // Write _disk_buf into _filename
+    butil::File::Error error;
+    butil::FilePath file_path(filename);
+    butil::FilePath dir = file_path.DirName();
+    if (!butil::CreateDirectoryAndGetError(dir, &error)) {
+        LOG(ERROR) << "Fail to create directory=`" << dir.value()
+                   << ": " << error;
+        return;
+    }
+
+    butil::fd_guard fd(open(filename, O_WRONLY | O_CREAT | O_APPEND | O_TRUNC, 0666));
+    if (fd < 0) {
+        PLOG(ERROR) << "Fail to open " << filename;
+        return;
+    }
+    // Write once normally, write until empty in the end.
+    do {
+        ssize_t nw = _disk_buf.cut_into_file_descriptor(fd);
+        if (nw < 0) {
+            if (errno == EINTR) {
+                continue;
+            }
+            PLOG(ERROR) << "Fail to write into " << filename;
+            return;
+        }
+        LOG(ERROR) << "Write " << nw << " bytes into " << filename;
+    } while (!_disk_buf.empty());
+}
+
+void IOBufProfiler::StopAndJoin() {
+    if (_stop.exchange(true, butil::memory_order_relaxed)) {
+        return;
+    }
+    if (!HasBeenJoined()) {
+        Join();
+    }
+}
+
+void IOBufProfiler::Run() {
+    while (!_stop.load(butil::memory_order_relaxed)) {
+        Consume();
+        ::usleep(_sleep_ms * 1000);
+    }
+}
+
+void IOBufProfiler::Consume() {
+    IOBufSample* sample = _cur_sample.load(butil::memory_order_relaxed);
+    if (!sample) {
+        // If there are no samples, exponentially increase the sleep time
+        _sleep_ms = std::min(_sleep_ms * 2, MAX_SLEEP_MS);
+        return;
+    }
+
+    _sleep_ms = MIN_SLEEP_MS;
+    _cur_sample.store(NULL, butil::memory_order_release);
+    do {
+        // sample was consumed, skip it.
+        if (sample->next != NULL && !sample->block) {
+            IOBufSample* const saved_req = sample;
+            sample = sample->next;
+            IOBufSample::Destroy(saved_req);
+        }
+
+        // Consume all samples.
+        while (sample->next != NULL) {
+            IOBufSample* const saved_req = sample;
+            sample = sample->next;
+            if (saved_req->block) {
+                Dump(saved_req);
+            }
+            // Release samples until last sample.
+            IOBufSample::Destroy(saved_req);
+        }
+        if (sample->block) {
+            Dump(sample);
+        }
+
+        // Return when there's no more samples and samples are completely consumed.
+        if (IsComplete(sample)) {
+            IOBufSample::Destroy(sample);
+            return;
+        }
+    } while (true);
+}
+
+bool IOBufProfiler::IsComplete(IOBufSample* old_head) {
+    CHECK(!old_head->next);
+    IOBufSample* new_head = old_head;
+    IOBufSample* desired = NULL;
+    if (_sample_head.compare_exchange_strong(
+        new_head, desired, butil::memory_order_acquire)) {
+        // No one added new samples.
+        return true;
+    }
+    CHECK_NE(new_head, old_head);
+    // Above acquire fence pairs release fence of exchange in Submit() to make
+    // sure that we see all fields of samples set.
+
+    // Someone added new samples.
+    // Reverse the list until old_head.
+    IOBufSample* tail = NULL;
+    IOBufSample* sample = new_head;
+    do {
+
+        while (sample->next == IOBufSample::UNCONNECTED) {
+            sched_yield();
+        }
+        IOBufSample* const saved_next = sample->next;
+        sample->next = tail;
+        tail = sample;
+        sample = saved_next;
+        CHECK(NULL != sample);
+    } while (sample != old_head);
+
+    // Link old list with new list.
+    old_head->next = tail;
+    return false;
+}
+
+void SubmitIOBufSample(IOBuf::Block* block, int64_t ref) {
+    if (!IsIOBufProfilerEnabled()) {
+        return;
+    }
+
+    auto sample = IOBufSample::New();
+    sample->block = block;
+    sample->count = ref;
+    sample->nframes = GetStackTrace(sample->stack,
+                                    arraysize(sample->stack),
+                                    0); // may lock
+    IOBufProfiler::GetInstance()->Submit(sample);
+}
+
+bool IOBufProfilerFlush(const char* filename) {
+    if (!filename) {
+        LOG(ERROR) << "Parameter [filename] is NULL";
+        return false;
+    }
+
+    auto profiler = IOBufProfiler::GetInstance();
+    profiler->Flush2Disk(filename);
+    return true;
+}
+
+}
\ No newline at end of file
diff --git a/src/butil/iobuf_profiler.h b/src/butil/iobuf_profiler.h
new file mode 100644
index 0000000000..1ea9a734ac
--- /dev/null
+++ b/src/butil/iobuf_profiler.h
@@ -0,0 +1,166 @@
+// Licensed to the Apache Software Foundation (ASF) under one
+// or more contributor license agreements.  See the NOTICE file
+// distributed with this work for additional information
+// regarding copyright ownership.  The ASF licenses this file
+// to you under the Apache License, Version 2.0 (the
+// "License"); you may not use this file except in compliance
+// with the License.  You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing,
+// software distributed under the License is distributed on an
+// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+// KIND, either express or implied.  See the License for the
+// specific language governing permissions and limitations
+// under the License.
+
+#ifndef BIGO_BRPC_IOBUF_PROFILER_H
+#define BIGO_BRPC_IOBUF_PROFILER_H
+
+#include <unordered_map>
+#include <unordered_set>
+#include "butil/iobuf.h"
+#include "butil/object_pool.h"
+#include "butil/threading/simple_thread.h"
+#include "butil/threading/simple_thread.h"
+#include "butil/memory/singleton.h"
+#include "butil/containers/flat_map.h"
+
+namespace butil {
+
+struct IOBufSample;
+typedef std::shared_ptr<IOBufSample> IOBufRefSampleSharedPtr;
+
+struct IOBufSample {
+    static IOBufSample* const UNCONNECTED;
+
+    IOBufSample* next;
+    IOBuf::Block* block;
+    int64_t count; // // reference count of the block.
+    void* stack[28]; // backtrace.
+    int nframes; // num of frames in stack.
+
+    static IOBufSample* New() {
+        return get_object<IOBufSample>();
+    }
+
+    static IOBufSample* Copy(IOBufSample* ref);
+    static IOBufRefSampleSharedPtr CopyAndSharedWithDestroyer(IOBufSample* ref);
+    static void Destroy(IOBufSample* ref) {
+        ref->_hash_code = 0;
+        return_object(ref);
+    }
+
+    size_t stack_hash_code() const;
+
+private:
+    friend ObjectPool<IOBufSample>;
+
+    IOBufSample()
+        : next(NULL)
+        , block(NULL)
+        , count(0)
+        , stack{}
+        , nframes(0)
+        , _hash_code(0) {}
+
+    ~IOBufSample() = default;
+
+    mutable uint32_t _hash_code; // For combining samples with hashmap.
+};
+
+BAIDU_CASSERT(sizeof(IOBufSample) == 256, be_friendly_to_allocator);
+
+namespace detail {
+// Functor to compare IOBufRefSample.
+template <typename T>
+struct IOBufSampleEqual {
+    bool operator()(const T& c1, const T& c2) const {
+        return c1->stack_hash_code() ==c2->stack_hash_code() &&
+            c1->nframes == c2->nframes &&
+            memcmp(c1->stack, c2->stack, sizeof(void*) * c1->nframes) == 0;
+    }
+};
+
+// Functor to hash IOBufRefSample.
+template <typename T>
+struct IOBufSampleHash {
+    size_t operator()(const T& c) const {
+        return c->stack_hash_code();
+    }
+};
+
+struct Destroyer {
+    void operator()(IOBufSample* ref) const {
+        if (ref) {
+            IOBufSample::Destroy(ref);
+        }
+    }
+};
+}
+
+class IOBufProfiler : public butil::SimpleThread {
+public:
+    static IOBufProfiler* GetInstance();
+
+    void Submit(IOBufSample* s);
+
+    void Dump(IOBufSample* s);
+
+    void Flush2Disk(const char* filename);
+
+    void StopAndJoin();
+
+private:
+    friend struct DefaultSingletonTraits<IOBufProfiler>;
+
+    typedef butil::FlatMap<IOBufSample*,
+                           IOBufRefSampleSharedPtr,
+                           detail::IOBufSampleHash<IOBufSample*>,
+                           detail::IOBufSampleEqual<IOBufSample*>> IOBufRefMap;
+
+    // <iobuf stack, ref count>
+    typedef butil::FlatMap<IOBufRefSampleSharedPtr,
+                           int64_t,
+                           detail::IOBufSampleHash<IOBufRefSampleSharedPtr>,
+                           detail::IOBufSampleEqual<IOBufRefSampleSharedPtr>> StackCountMap;
+    struct BlockInfo {
+        int64_t ref{0};
+        StackCountMap stack_count_map;
+    };
+    typedef butil::FlatMap<IOBuf::Block*, BlockInfo> BlockInfoMap;
+
+    IOBufProfiler();
+    ~IOBufProfiler() override;
+    DISALLOW_COPY_AND_ASSIGN(IOBufProfiler);
+
+    void Run() override;
+
+    void Consume();
+
+    bool IsComplete(IOBufSample* old_head);
+
+    butil::atomic<bool> _stop;
+    butil::atomic<IOBufSample*> _sample_head;
+    butil::atomic<IOBufSample*> _cur_sample;
+
+    butil::IOBuf _disk_buf;  // temp buf before saving the file.
+    IOBufRefMap _stack_map; // combining same samples to make result smaller.
+    BlockInfoMap _block_info_map; // record block info
+    Mutex _mutex;
+
+    uint32_t _sleep_ms;
+    static const uint32_t MIN_SLEEP_MS;
+    static const uint32_t MAX_SLEEP_MS;
+};
+
+bool IsIOBufProfilerEnabled();
+bool IsIOBufProfilerSamplable();
+
+void SubmitIOBufSample(IOBuf::Block* block, int64_t ref);
+
+bool IOBufProfilerFlush(const char* filename);
+
+}
+#endif //BIGO_BRPC_IOBUF_PROFILER_H