View in browser
echo-newsletter-32

 eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

13th June 2023

 

I'm in Zurich this week for KCD Zurich where I'll be talking about eBPF and how people are going to want product with eBPF Inside™ not always because they know what it is, but because of what it enables.

 

That isn't actually the main reason why I'm here this week. We are currently working on two very exciting projects for the eBPF ecosystem that will be launched at KubeCon NA in Chicago. I'm going to keep them both under wraps for now and no they both don't involve any code, but I think they will help bring eBPF to the masses and achieve the vision of eBPF Inside™. I also still have to write my talk so let's 🐝 gin!

The Technical

Race condition between kube-proxy and cilium

Dive into debugging the solution

 

Performance tracing of Podman using eBPF

See how eBPF can be leveraged to improve performance

 

eBPFDevSecTools/opened

"Tool to extract specific eBPF functions from large monoliths"

 

daeuniverse/dae

"A Linux high-performance transparent proxy solution based on eBPF" and more goose in cloud native

 

avilum/secimport

"Python sandbox toolkit, powered by eBPF / Dtrace"

 

ph1048/ebpfdbg

"This project is aimed to help debug large eBPF verifier error logs. This simple utility allows to post-process eBPF verifier log to a human-readable HTML page"

🐝

 

The Ecosystem

Hubble Series (Part 1): Re-introducing Hubble

Hubble is not the best known part of Cilium, but I find that it is often user's favorite once they start using it because of the visibility it gives them into the complex world of K8s networking

 

Decoding eBPF Observability: How eBPF transforms Observability as we know it

I like the table comparing eBPF vs agents vs sidecars for observability

 

Saying Goodbye to Ingress: Embracing the Future of Kubernetes Traffic Management with Gateway API and Cilium

"Cilium enables users to consolidate the number of cloud-native networking and security tools they have" I think this is key to the growth to the project

 

Supercharging Kubernetes Fury Distribution's Networking OSS Module with Cilium

"Thanks to these specific features, Cilium easily became one of the most relevant and reliable CNI solutions"

 

eBPFmon: A new tool for exploring and interacting with eBPF applications

"an open source TUI application that helps users intuitively understand, analyze, and explore eBPF programs"

 

eBPF based-sensor for Data Security: Unveiling the Cybersecurity Hype

Security has now become the #2 eBPF use case for startups behind observability

 

eBPF: A New Approach to Cloud-Native Observability, Networking and Security for Current (5G) and Future Mobile Networks (6G and Beyond)

"Our experimental results demonstrate the technical feasibility of eBPF to achieve highly performant monitoring, observability, and security tooling for mobile networks"

 

CTO Point of View: Why Wiz is launching a Runtime Sensor

"This allows the Runtime Sensor to remain a lightweight eBPF agent" Great to see eBPF expanding even more into the security space

 

Cycode Leverages eBPF to Secure CI/CD Pipelines

and another security tool using eBPF

 

Using eBPF to Power a Cloud-Native Transformation

"eBPF efficiently extends the cloud-native and other capabilities of Rakuten Mobile’s network"

 

How eBPF enables Cloud Native Innovation and Performance

Learn how eBPF can tie into business objectives for the C Suite

 

eBPF: Der neue Stern am Cloud-Native-Himmel

auf deutsch

 

What is eBPF?

Quick intro blog from a Kubernetes platform company

🐝

 

The How To

Setup Kubernetes + eBPF Cilium with Performance Tuning #Part1

Walking through how to set up a cluster with Cilium and Hubble

 

Installing Cilium Service Mesh with the Kubernetes Control Plane externally (illumos)

Detailed intro to get Cilium Service Mesh up and running

 

Kubernetes Security And Networking 8: Loading The Cillium CNI

Video walking through how to set up Cilium

 

The power of eBPF Security, Tetragon #Part2

Learn how to set up Tetragon and kill a process

 

Setting up eBPF in macOS: A Beginner’s Guide

with a Lima VM

🐝

 

The Events

KCD Zurich

Come see me talk about eBPF on June 15th

 

San Francisco Cilium and eBPF Roundtable with Isovalent

In person on June 15th

 

Cilium & AKS Workshop Day

Munich on June 29th

 

Isovalent Security Summer School - Session 1: Network Policies and Cilium Tetragon

Online July 4th EMEA and July 13th Americas

 

CiliumCon is back!

Now as a full day event at KubeCon Chicago. Register today!

🐝

The Videos

eCHO Episode 93:

BPF Signing

eCHO Episode 93: BPF Signing

  

eCHO Episode 94:

Cluster API and Cilium Cluster Mesh

eCHO Episode 94: Cluster API and Cilium Cluster Mesh

Upcoming Stream

eCHO Episode 95: Cilium 1.14 Sneak Peak

Add to your calendar

The Tweet of the Week

First we need to say goodbye to sidecars, now to ingress?! Then again, who doesn't love security, observability and flexibility 😉  Check out Saif Rajhi's medium post about Gateway API and Cilium. I can't wait to give it a try 😍  #kubernetes #ingress #devsecops #observability #servicemesh #cilium

As always, if you’ve seen a blog post, a tool, or anything else eBPF or Cilium related that you think the rest of the community should hear about, send them my way. You can either hit reply or join the #echo-news channel on Cilium Slack. You can also find all of the past episodes on the website.

🐝

To make sure you keep getting these emails, please add bill@isovalent.com to your address book or otherwise mark me as a permitted sender.

 

Know a friend that needs to be in the know? Forward this to them

Was this forwarded to you? Sign up today!

Written and sent by Bill Mulligan. Any feedback is welcome!

circle headshot

I work at Isovalent which is leading the eBPF-Powered Revolution in Cloud Native Networking, Observability, and Security with Cilium

isovalent
LinkedIn
Twitter

Isovalent, 20830 Stevens Creek Blvd. #1047, Cupertino, CA 95014, United States

Unsubscribe Manage preferences