eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

16th January 2024

To quote my colleague Dan "Spent a few hours writing more protocol parsing code in #eBPF, convinced that we can move so much logic into the network and I’m more excited than ever 🐝". If you look at the Tweet of the Week, you can see some of his work getting BGP to work in eBPF and Isovalent has been doing other protocol parsing in eBPF for a long time. The promise of a truly programmable network has been around for a long time, but we might just be on the cusp of finally getting there.

If you want to see more predictions for the future, be sure to check out Nico's blog "Networking and eBPF Predictions for 2024 and Beyond". My personal favorite is "There’s an eBPF App for That" though I may be biased coming up with the eBPF is the equivalent of an App Store for Linux analogy ;) What are your predictions for the New Year? Reply and let me know or be inspired by something in this week's newsletter. Let's 🐝 gin!

The Technical

Hello eBPF: Recording data in basic eBPF maps (2)

with Java

Load Balancing for Kubernetes Services Using BGP with Cilium

"This combination of Cilium/BGP significantly reduces latency to your cloud-based services. It also enhances security and transparency"

Unveiling eBPF Verifier Errors - Episode 1

Learn common bpf verifier errors. There is also a Github repo

XDP and eBPF for Network Observability with Python

Expanding on examples from Liz's book

Kubernetes on FreeBSD with Linux worker nodes and Cilium

Learn how to create the basic set up

deggja/netfetch

"Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads" now with support for Cilium

amitmavgupta/azure-terraform

"How to deploy Cilium on AKS clusters"

retis-org/retis

"Tracing packets in the Linux networking stack, using eBPF"

eeriedusk/nysm

"an eBPF stealth container meant to make offensive tools fly under the radar of System Administrators"

bfengj/eBPFeXPLOIT

"a penetration testing tool based on eBPF technology"

🐝

The Ecosystem

Networking and eBPF Predictions for 2024 and Beyond

#15 will really suprise you

Cisco Acquires Isovalent, Creator of eBPF: Why It Matters

"those just learning or hesitant about eBPF should have a new level of comfort and reassurance about leveraging the technology, now backed by Cisco"

Scaling Cilium to New Heights With xDS

Interesting idea, let's see how it plays out in the community

eBPF - Unleash the Linux kernel

Short intro blog

Cilium: Next generation Networking & Security of CNCF with Golang, eBPF & Hubble

Short intro blog

Learned Cilium Network Policies

"I also found the Network Policy Editor extremely valuable"

Blixt - A load-balancer written in Rust, using eBPF, born from Gateway API

"One thing that can’t be overstated about this project is that it has been at the center of a lot of learning, community building and fun"

eBPF in Telecom

A $1,500 analyst research note. "No strategy for cloud-native, autonomous telecom networks can be complete without a consideration of the part that eBPF will play"

🐝

The How To

How to migrate from Red Hat OpenShiftSDN/OVN-Kubernetes to Cilium

"I’m seeing more and more queries about migrating to Cilium within an existing Red Hat OpenShift cluster"

From Reactive to Proactive: Transforming Security with Tetragon

Getting started tutorial with a few examples

Cilium dual-stack k3s pi-setup

Set up Cilium on a Raspberry Pi

Demystifying Cilium: Learn How to Build an eBPF CNI Plugin from Scratch

Breakdown of a tutorial from KubeCon

Setup basic L4 Load Balancing with Cilium CNI and Ubuiqiti Edge Router

...using the BGP control plane

🐝

The Video

Buzzing Across Space: The Illustrated Children’s Guide to eBPF

The classic book to movie adaptation

🐝

The Events

41. stretnutie komunity Cloud Native – Cilium

Meetup in Bratislava on January 18th

Cilium Workshop with Isovalent and Sue - Geldermalsen

January 25th

Cloud Native Prague #9

Intro to Cilium on January 30th

Cilium + eBPF Day

Coming back to KubeCon Paris!

🐝

The Livestreams

eCHO Episode 119:

bpftune and reinforcement learning

eCHO Episode 120:

Cilium Cluster Mesh with DNS