eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

13th February 2024

From what I have seen in the first six weeks of the year, 2024 is where we will see eBPF go from project to product. Many of the first "users" of eBPF were open source projects like bcc and Cilium. We are now seeing companies build their whole product strategy around eBPF.

The Silent Platform Revolution that Daniel and I predicted, with eBPF becoming the key technology in the cloud native infrastructure stack is coming true. Don't believe me? Just check out the number of companies leveraging eBPF in their products. And that list is growing almost every week from CDNs to API observability to software security. Or look at how much longer this newsletter has gotten since it was started two years ago, even I have a hard time to keep up now. Many more blog posts to read so let's 🐝 gin!

The Technical

Cilium 1.15 – Gateway API 1.0 Support, Cluster Mesh Scale Increase, Security Optimizations and more!

Read Isovalent's coverage of the latest release

Hello eBPF: Tail calls and your first eBPF application

I met Johannes at FOSDEM, you should read his Java + eBPF blog posts!

We removed Shared-Memory by building an eBPF Load-Balancer!

"[with eBPF]  there is no noticeable difference in response time with an increase in the number of requests"

eBPF for Linux Admins: Part VIII

Learn to trigger an eBPF program when kernel executes

eBPF Tracepoints: Gaining Access to the TCP State Machine

for debugging and analysis

eBPF program creation in practice – PID concealment (Part 1)

"create an eBPF program using a tracepoint"

Security and observability with Cilium on my 5G network

"gradually build up our network policies based on the information from Hubble"

Adventures in eBPF

"build a program that leverages eBPF to intercept SSL traffic in user-space"

isovalent/ebpf-docs

"An effort to comprehensively document eBPF"

hawkv6/hawkwing

"Leveraging eBPF for Intent-Driven Application-Centric End-to-End Segment Routing over IPv6" Master Thesis

amitmavgupta/azure-terraform

"Create AKS clusters with Cilium and Isovalent"

amitmavgupta/azure-bicep

"AKS Bicep support for CNI's"

snyk/leaky-vessels-dynamic-detector

"a reference implementation for an eBPF-based runtime detection for the runc and Docker vulnerabilities"

hamidrezakhosroabadi/xdp-observer

"A simple xdp application to observe tcp connections in userspace"

YutaroHayakawa/bpfib

"BPF IP routing toolkit"

🐝

The Ecosystem

The State of eBPF

Research Report from the eBPF Foundation

Cilium Talks at KubeCon EU 2024

27 talks this time, almost like it needs it's own conference...oh wait!

Rabobank - Case Study

"“We don’t even have a practical use case for a service mesh" I think we will hear more and more of this going forward

Java and eBPF--airhacks.fm podcast

Follow up from the blog series

eBPF Foundation & Linux reveal comprehensive study on eBPF's impact

Coverage of the above report

eBPF has opened many doors for Linux, will continue to do so for many years

Even more coverage

eBPF: Meaner Hooks, More WebAssembly and Observability Due

"enterprises lack the expertise to directly utilize eBPF and should opt for tools configured with eBPF"

What is XDP after all?

The good, bad, and ugly

Introducing Revenium Isotopes: Leveraging eBPF to Revolutionize API Observability & Monetization

"eBPF-based API metering agents to monitor API traffic transparently"

Does Security Observability Really Need eBPF?

"eBPF is where you’ll get that data"

How eBPF Benefits IT Operations Teams Seeking to Improve Observability

"With eBPF, each of these limitations goes away"

Cilium Hubble now included with DigitalOcean Kubernetes at no cost

Great to see another cloud provider picking up Hubble, can't wait for more. Launch video too!

Introduction à l’eBPF

en français

Enhancing ClickHouse Thread Performance Analysis with eBPF: Unveiling Insights for Optimization

with BCC

Exploring eBPF: A New Approach to Observing Kubernetes Workloads

"eBPF will become integral to Cisco Full-Stack Observability’s strategy for delivering unprecedented visibility into Kubernetes workloads"

eBPF wrapped 2023

"From a Red Hat product view, we’re looking to further deepen integration of eBPF"

Verified runtime fingerprints to eliminate zero day software supply chain attacks

"Powered by eBPF, the standard is the first to baseline ‘good’ behavior of cloud native workloads"

Kernel Introspection from Linux to Windows

"This evolution reflects the convergence of Linux and Windows OS paradigms"

eBPF: Revolutionizing Observability for DevOps and SRE Teams

"eBPF is more than just a technology; it's a paradigm shift in observability"

🐝

The How To

Migrating from MetalLB to Cilium

"those of you who already use Cilium may decide that one fewer tool to manage already helps reducing the operational fatigue"

ArgoCD Deployment on RKE2 with Cilium Gateway API

Moving on from Kubernetes Ingress

A Quick Glance at Cilium CNI

Installation and configuration of a few features like BGP, Hubble, and Ingress

Enabling Cluster Mesh on an AKS cluster from Azure Marketplace

With screenshots included

Taming Tetragon With Cribl.Cloud

Ingest, enrich, and transform Tetragon logs with Github repo

Installing Cilium

"Getting Cilium up an running in an Azure AKS cluster"

Google Cloud Logging and Cloud Monitoring example with Tetragon

How to harness Tetragon’s tracing policies for detection and enforcement

Migration from Calico CNI to Cilium CNI in BareMetal Kubernetes Cluster and Monitoring traffic using Hubble UI

eBPF: Up and Running Part 1

"introduction to writing your first eBPF program using C and Golang"

🐝

The Video

gRPC Routing with Cilium Gateway API

Another great demo from Nico

Liz’s Cilium 1.15 Highlights

All the key updates in less than two minutes

Youtube Shorts from Microsoft

Build process, How easy is it, Chandan's advice

BGP now has BGP Community Support and MD5 Authentication

🐝

The Events

Transforming observability with eBPF superpowers

Join a webinar with me as a speaker on February 13th

eBPF: the next big thing in Service Mesh!

Livestream on February 13th

Code, Not Config: Simplifying DevOps with Cilium

Webinar on February 20th

Cilium + eBPF Day

Coming back to KubeCon Paris. The schedule is out now!

🐝

The Livestreams

eCHO Episode 123:

Cilium 1.15

eCHO Episode 124: Automating Cilium Install with Terraform