View in browser
echo-newsletter-55

 eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

7th May 2024

 

In case you missed the blog or hilarious video, Nico has a new eBook "Kubernetes Networking and Cilium for the Network Engineer" out now! It helps translate the alphabet soup of acronyms from wireless networking, data center networking, MPLS, Service Provider routing, software-defined networking, and network automation to the world of Kubernetes. It really is a book written by a network engineer for network engineers.

 

Sitting here writing this at DevOpsDays Berlin, I'm reminded that there is world beyond cloud native. To truly achieve Cilium's vision of becoming the standard connectivity layer for any workload, we need ways to communicate to both the applications and people outside Kubernetes. This book is a great step forward to bringing traditional network engineers into the Cilium ecosystem and towards cloud native ways of thinking, working, and operating. I've got to practice my talk one last time so let’s 🐝 -gin

The Technical

Introducing The New “Kubernetes Networking and Cilium for the Network Engineer” eBook!

"A book for network engineers by a network engineer" translating from IP to ID

 

Benchmark results of Kubernetes network plugins (CNI) over 40Gbit/s network [2024]

"For Standard Clusters: Cilium stands out as the primary choice"

 

Seccomp, eBPF, and the Importance of Kernel System Call Filtering

Why you should avoid user space

 

How to Manage XDP/eBPF Effectively for Better DDoS Protection

A discussion of different update approaches

 

eBPF’s User Ring Buffer: Introducing BPF_MAP_TYPE_USER_RINGBUF

"for data transfer from user space to the kernel, rather than the other way around"

 

Cilium: Network Policies

Deep dive into the different types of Cilium network policies

 

Detect XZ Utils CVE 2024-3094 with Tetragon

"see how we can leverage Tetragon to observe anything happening on this machine" I think we will hear more and more of this

 

Exploring eBPF Implementation through Linux Source Code

Dive into the bits, bytes, and syscalls

🐝

 

The Ecosystem

Isovalent Enterprise for Tetragon 1.13: Kubernetes Identity Aware Policies, Default Rulesets, HTTP and TLS Visibility, and More!

The default rulesets are the highlight for me in the Tetragon OSS 1.1 release

 

Cilium’s Past Points to Its Future

"involves not just K8s and containers, but also VMs, edge, and other environments"

 

eBPF: Reliable Policy Setting and Enforcement

Highlighting the growing importance of eBPF for security

 

Cilium - Learning and Runing

em português & CILIUM - Redes e Políticas

 

Cisco Isovalent expands open-source security with Tetragon update

"Nothing has changed to our roadmap since the acquisition"

 

Isovalent Strengthens Cloud Native Security via Tetragon Enterprise Update

"The goal is to provide a missing cybersecurity piece to the cloud native puzzle"

 

eBPF Kubernetes Auto Instrumentation Landscape

Just a quick buzz across the projects

 

VMblog Expert Interview: Nico Vibert of Isovalent Discusses New eBook: Kubernetes Networking and Cilium for the Network Engineer

"Cilium is fascinating - it's become a universal cloud native networking platform"

🐝

 

The How To

Crafting new Linux schedulers with sched-ext, Rust and Ubuntu

"provides a mechanism to implement scheduling policies as eBPF programs"

 

Context-aware security incident response with Dynatrace Automations and Tetragon

e🐝PF and honeypots, what is not to like?

 

Kubernetes Gateway API with Cilium

Guide to configure Cilium's Gateway API

 

Deploy Cilium on Azure Kubernetes Service with a Star Wars Demo

and secure with L4 and L7 network policies

🐝

 

The Video

CNL: Tetragon in action - detect & nip Kubernetes attacks in the bud

See Paul walk through a few CTF scenarios

 

Introducing the "Kubernetes Networking and Cilium eBook for the Network Engineer"

If nothing else watch for the outfit, accent, and music 🤣

 

Cilium as Kubernetes Data Plane for Mission Critical Industries

Hear why Schuberg Philis chose Cilium

 

Kubernetes Network Policy Deep Dive

Including Cilium Layer 7 HTTP

 

Cilium CLI videos for 

Installation, Configuration, and Troubleshooting

🐝

 

The Events

Cloud Native & Platform Engineering Auckland - May 2024

"Cilium in Action: Strengthening AKS with Powerful Network Management" on May 9

 

What's new with Isovalent Enterprise for Cilium 1.15 

Webinar on May 23

 

Virtual Workshop: Isovalent Enterprise for Cilium 1.15 

Virtual Workshop on May 30

🐝 

The Livestreams

eCHO Episode 133:

IPsets

eCHO Episode 133: IPsets

  

eCHO Episode 134:

Tetragon In Action

eCHO Episode 134: Tetragon In Action

Upcoming Stream

eCHO Episode 135: KCD New York overview and upcoming events!

The Tweet of the Week

Screenshot 2024-05-07 at 15.30.24

As always, if you’ve seen a blog post, a tool, or anything else eBPF or Cilium related that you think the rest of the community should hear about, send them my way. You can either hit reply or join the #echo-news channel on Cilium Slack. You can also find all of the past episodes on the website.

🐝

To make sure you keep getting these emails, please add bill@isovalent.com to your address book or otherwise mark me as a permitted sender.

 

Know a friend that needs to be in the know? Forward this to them

Was this forwarded to you? Sign up today!

Written and sent by Bill Mulligan. Any feedback is welcome!

Screenshot 2023-12-12 at 10.49.34

I work for Isovalent at Cisco which is leading the eBPF-Powered Revolution in Cloud Native Networking, Observability, and Security with Cilium and Tetragon

logo-wordmark-isovalent-vertical-dark@2x
LinkedIn
X

Isovalent, 20830 Stevens Creek Blvd. #1047, Cupertino, CA 95014, United States

Unsubscribe Manage preferences