View in browser
Cilium Annual Report and debugging. eBPF on Wikipedia and in your dreams.

 eCHO news in your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

7th February 2023

 
In case you missed it, the Cilium Annual Report is out now. In it you will find quantitative (60% more comments on PR and 4x more blogs than last year) and qualitative ("It is important to create a Highway in our Kubernetes world in order for the network to seamlessly communicate with all of the ecosystem and still provide the perfect end user experience. Using Cilium CNI, we built that Highway")  measures of the project success over the past year.
 
The highlight for me is how it showcases that end users across diverse industries like finance, retail, software, and telecommunications are all realizing the benefits of Cilium and eBPF and have shown that it is production ready at scale. With this base, I'm excited to see the Cilium ecosystem continue to bloom in 2023 (just look at this newsletter, the longest yet!)
 
As a part of that ecosystem growth, just a reminder that the first CiliumCon CfP is due on Sunday. Let me know if you need any help!
 

Let's 🐝 gin!

The Technical

Debugging Cilium Envoy Upstream Connection Failures

A fun dive through Cilium, Hubble, Envoy, and tcpdump and the resulting solution

 

Finally making use of bpftrace

Best opening line of a blog "I am old enough to remember when BPF meant the traditional Berkeley Packet Filter" 😂

 

Check Out the new Network Observability Support in OpenShift 4.12

I like the airplane view of a city's traffic analog for eBPF-powered observability

 

Tracing Locks in Postgres using eBPF programs

My new description of what eBPF does "Quite useful information that's otherwise impossible to get"

 

vadorovsky/aya-btf-map

"BTF map support for Aya"

 

CloudNativeDataPlane/cndp

"Cloud Native Data Plane (CNDP) is a collection of user space libraries to accelerate packet processing for cloud applications using AF_XDP"

 

nickolaev/vagrant-parallels-m1-k8s-cilium

"Vagrantfile and Scripts to Automate Kubernetes with Cilium setup using Kubeadm"

 

Esonhugh/sshd_backdoor

"/root/.ssh/authorized_keys evil file watchdog with ebpf tracepoint hook"

🐝

 

The Ecosystem

Announcing the Cilium annual report

"The highlight of the report is how it showcases that end users across diverse industries like finance, retail, software, and telecommunications are all realizing the benefits of Cilium and eBPF and have shown that it is production ready at scale" Get the pdf on Github

 

eBPF on Wikipedia

Cool to see that it finally has its own page!

 

Performance Testing Cilium Ingress at Hetzner Cloud

"Overall, Cilium provided a massive increase in both RPS and throughput while still reducing CPU usage" not much more I need to say 🤷

 

WTF is Cilium?

Learn what Cilium is explained in superhero metaphors 

 

Ep. #57, Monitoring K8s Applications with Shahar Azulay of Groundcover

"We see other observability companies moving into eBPF as a sensor because it can open up a lot of unseen parts in production that developers or teams just don't touch that easily or go through that instrumentation journey."

 

What You Need to Know About eBPF Security Observability

"The new eBPF program mentioned above provides a unified API strategy for signals and mitigations, optimizes the kernel LSM framework, and solves the problem that in existing mechanisms, system calls are easy to be lost"

 

Groundcover: Simplifying Observability with eBPF

"groundcover offers an opinionated take on what to store, based on experience" (and eBPF)

 

Six eBPF trends for 2023

#4 and #5 are the most interesting to me

 

The Benefits of eBPF for API Security

"The biggest advantage of eBPF comes from its ability to pull deep data from the application environment"

 

Exploring Service Mesh through Istio, eBPF, and RSocket Broker: An In-depth Study

More than one way to fry a fish

 

What is eBPF and Do You Really Need it?

A quick video walk through of a bunch of resources around the community

 

The Advantages of eBPF for CWPP Applications

Great to see more security vendors switching away from kernel modules and towards eBPF 👏

 

eBPF enhances cloud-native security through a kernel approach

theCUBE interviews Liz Rice

 

Turbocharging Host Workloads with Calico eBPF and XDP

Great to see more CNIs using eBPF

 

Patches Updated For Hooking eBPF Programs Into The Linux Kernel Scheduler

One of the more unique use case for eBPF, rewriting the scheduler gets a v2

🐝

 

The How To

How I moved from MetalLB to Cilium

I think we will be seeing a lot more of this with the new BGP integration

 

Cilium Integration with F5 BIG-IP

A video walking through how to set up Cilium with F5 BIG-IP with an accompanying Github repo

 

Cilium Policy Verdicts

Not quite a blog post, but cool to see how you can visualize network policy enforcement in Grafana now!

 

eBPF for Cybersecurity - Part 2

Learn about how to write an eBPF program

 

Establish Cilium ClusterMesh with Helm Chart

Walk through with use cases for multi cluster network policy and encryption 

🐝

 

The Events

Civo Navigate

Tracy Holmes will talk about home lab observability in Tampa February 7th

 

What’s New with Cilium & eBPF South Bay Meetup

Join the first ever Cilium Meetup, be the OG on February 9th

 

ContainerDay Security

Cilium workshop and Tetragon talk in always sunny Hamburg February 8th

 

Kubernetes & Cloud Native Berlin Meetup February Edition

Get an introduction to eBPF from Ayesha Kaleem on February 8th in Berlin

 

Software Circus Valentine's Day Edition

Hear Ray talk about Cilium & Grafana - A match made in heaven in Amsterdam on February 15th

 

Découverte de Cilium et intégration dans AKS

Intro to Cilium on February 28th in Lyon

 

CiliumCon

The first ever CiliumCon is happening on April 18th at KubeCon + CloudNativeCon. CfP is open until 12th of February. 

🐝

The Videos

eCHO Episode 77: Automating Clusters and Cilium with Flux Part 3

eCHO Episode 77: Automating Clusters and Cilium with Flux Part 3

  

eCHO Episode 78: Stream Control Transmission Protocol (SCTP)

eCHO Episode 78: Stream Control Transmission Protocol (SCTP)

Upcoming Stream

eCHO Episode 79: Transparent Encryption with IPsec and WireGuard

Add to your calendar

The Tweet of the Week

While you sleep, eBPF captures your dreams! 🤣

As always, if you’ve seen a blog post, a tool, or anything else eBPF or Cilium related that you think the rest of the community should hear about, send them my way. You can either hit reply or join the #echo-news channel on Cilium Slack. You can also find all of the past episodes on the website.

🐝

To make sure you keep getting these emails, please add bill@isovalent.com to your address book or otherwise mark me as a permitted sender.

 

Know a friend that needs to be in the know? Forward this to them

Was this forwarded to you? Sign up today!

Written and sent by Bill Mulligan. Any feedback is welcome!

Bill Mulligan

I work at Isovalent which is leading the eBPF-Powered Revolution in Cloud Native Networking, Observability, and Security with Cilium

isovalent
LinkedIn
Twitter

Isovalent, 20830 Stevens Creek Blvd. #1047, Cupertino, CA 95014, United States

Unsubscribe Manage preferences