eCHO news in your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

This week brings us BTFGen for eBPF portability, a guide to BCC, eBPF for Windows finally getting a logo, and Cilium being integrated into both Gaia-X and Mirantis Kubernetes Engine. Let's 🐝 gin!

The Technical

BTFGen: One Step Closer to Truly Portable eBPF Programs

"BTFGen is implemented in bpftool and it uses the libbpf CO-RE logic to solve relocations. With this information it’s able to pick the types involved in a relocation to generate the “reduced” BTF file"

Resiliency Superpowers with eBPF

See Liz Rice demo how eBPF can help with dynamic vulnerability patching, super-fast load balancing, and multi-cluster networking at QCon April 5

eBPF Nuances on Minikube

As expected, when you add more abstracts, things start to go funny. This time with mother of all containers in Minikube

BPF Compiler Collection Tools (BCC Tools) | Ultimate Guide

Find out what BCC is, what is does, what is lacks, and what your other options are

wachy - A dynamic tracing profiler for Linux

"Trace arbitrary compiled binaries and functions on Linux, at runtime with 0 modifications."

ecapture

"capture SSL/TLS text content without CA cert by eBPF"

egrets

"A proof of concept tool that uses eBPF, raw sockets, and kprobes to monitor egress traffic"

eBPF XDP: The Basics and a Quick Tutorial

"eXpress Data Path (XDP) is a framework that makes it possible to perform high-speed packet processing within BPF applications" Learn the basics here

Observing HTTP/2 Traffic is Hard, but eBPF Can Help

eBPF going where observability couldn't go before because of HPACK headers

🐝

The Ecosystem

eBPF for Windows project logo

Excited to see this project continue to grow! It looks like they might also be porting it to Windows 2000

An introduction to eBPF and where it shines

Paywall. eBPF must be going mainstream if it is in TechTarget

Get the Best of Both Worlds With the KKP 2.19 CNI Strategy

"Cilium performed up to 30% better than Canal when running in ordinary Kubernetes clusters on the same hardware." No wonder they are switching

Sovereign Cloud Stack – Release 2

Germany's Sovereign Cloud now connects to Gaia-X Federation Service and includes Cilium - German Version in Heise

Cilium now integrates with Mirantis Kubernetes Engine

Yet another Kubernetes distro choosing Cilium as their default CNI

🐝

The How To

Kubernetes Network Policies with Cilium

Learn how to apply Cilium network policies on layers 3, 4, and 7 with hands on examples

Kubernetes Security — Explore Cilium host firewall and host policies

Create network policies that apply to the nodes in the host namespace

Networking, security & observability with Cilium - Civo Online Meetup

Online meetup on March 30th with Isovalent and Civo giving an overview of Cilium and a Cilium network policy security tutorial. Register today!

🐝

The Video