eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

2nd July 2024

Shedrack has been on a tear with Cilium case studies this year. With over 20 published and a few more already on the way, Cilium is well on its way to have the 3rd most case studies behind just Kubernetes and Prometheus. In just the past weeks, there have been ones from DigitalOcean, Nemling.com, PostFinance, Sicredi, and WS02. That's four continents and four completely different industries!

I love these case studies not only because they show how widely deployed Cilium is, but also because of how they highlight the positive impact that Cilium has on the business.

"Cilium is a critical piece of software enabling new business capabilities."

"Cilium enabled us to acquire more sophisticated customers."

"Cilium alleviates the pains of managing the networking for Kubernetes clusters."

Are you an end user of Cilium and would like to tell how Cilium is impacting your business? Hit reply to this email or DM me and I can either connect you with Shedrack so he can interview you and write up your story or I can help you write your CfP for Cilium + eBPF Day. I have another case study to review so let’s 🐝 -gin.

The Technical

Reverse engineering eBPF programs

Digging into eBPF from the ground up

Modernizing BPF for the next 10 years

"it might be feasible to compile the kernel to the BPF ISA"

Hello eBPF: BPF Type Format and 13 Thousand Generated Java Classes (11)

enabling compiling of every eBPF program

A simple pair of eBPF tracepoint handlers

"eBPF program entry points have a great deal in common with JavaScript events"

Aya Rust Tutorials

Using maps and firewalling

Fooling Port Scanners: Simulating Open Ports with eBPF and Rust

fake open ports to manipulate network behavior

mtardy/bpfmemapie

"A tool to render a pie chart of memory usage (bytes_memlock) of BPF maps on the system 🥧"

aredan/ciliumlabs

"Cilium Labs with Kind"

TomasPhilippart/ebpfangel

"Ransomware Detection using Machine Learning with eBPF for Linux"

danteslimbo/dust

"dust is a pwru to trace io request"

🐝

The Ecosystem

Case Study: DigitalOcean

"Cilium enabled us to acquire more sophisticated customers"

Case Study: Nemlig.com

"Cilium exceeded my expectations of alleviating some of the pains of managing the network side of running Kubernetes clusters"

eBPF: Enabling security and performance to co-exist

"eBPF allows users to modify one-size-fits-all to fit their specific needs"

SUSE Acquires StackState to Provide Full Stack, Cloud Native Observability

The next eBPF acquisition in the books

Introducing: Kubernetes Network Observability with IBM SevOne 7.0 and eBPF

Big Blue goes yellow 🐝

Kubernetes Network Security: Exploring Cilium and Istio Implementations

Does the comparison matter if service mesh starts to disappear?

Kubernetes 网络和 Cilium

Nico's networking book now available in Chinese

How eBPF is shaping the future of Linux and platform engineering

"This meant we could rebuild everything better. What should we rebuild first?"

Ep. #11, Frictionless Observability with Yechezkel Rabinovich of Groundcover

"I think if you didn't experience eBPF yet, you should. It's magic, it's beautiful"

Kubernetes Observability in Action: Harnessing Innovative Observability using eBPF and Cilium

Get the eBook now!

Isovalent Enterprise Dashboards for Cilium: Operating at Scale

Agent errors, rate limiting, map pressure, what is stopping you?

The Use of eBPF in Observability Today

"adoption is growing rapidly and advanced techniques are being developed"

Securing Linux Systems with eBPF: The Future of In-Kernel Observability and Security

intro to eBPF

Runtime Enforcement: Software Security After the Supply Chain Ends

Why you might want to look at Tetragon

Cloud Native-nätverk med Cilium

 🇸🇪🇸🇪🇸🇪

Static keys for BPF

A proposal to disable code paths and eventually enable jump tables in eBPF

🐝

The How To

Enabling Multicast securely with IPsec in the cloud native landscape with Cilium

Move beyond uni and broadcast

Zero to Performance Hero: How to Benchmark and Profile Your eBPF Code in Rust

"we can finally profile the profiler"

KubeEdge meets Cilium !!!

Beta implementation, but great to see Cilium deployed on the edge

Monitoring PostgreSQL Database on Kubernetes using eBPF

Learn to track various client queries and identify potential bottlenecks

Can you run Tetragon on HashiCorp Nomad? — Part 2

applying Tracing Policies to secure your Nomad workloads

Run your Kubernetes Cluster on “Bare Metal” with Cilium CNI — Part. 1

See the top four reasons you should choose Cilium for bare metal

🐝

The Video

0x.tools eBPF tools beta announcement and hacking session

"A new method and toolset for troubleshooting application performance on Linux"

Observing all kernel functions: how hard could it be? - DevConf.CZ 2024

Will 80,000 functions crash the kernel?

How to Enable Cilium and IPsec ll Swift Start Guide

FIPS compliant traffic encryption in 60 seconds

Quick Encryption Videos

How to Rotate Encryption Key When Using Cilium to Encrypt Traffic in a Kubernetes Cluster and Enable Cluster Encryption with Cilium WireGuard Support

🐝

The Events

The platform engineer's survival guide to Kubernetes networking

Webinar about Cilium on July 9th

Unlocking the Power of Cilium for Platform Operators

Virtual Workshop on July 18 

Getting Started with Networking Security - Virtual Workshop series

Session 1: Intro to Networking Security & SecOps - July 30

Session 2: Networking Security: Zero Trust Visibility - August 6 

Simplify Kubernetes operations with Cilium Ingress: Hands-On Workshop for Platform Operators

Virtual Workshop on August 22

Observing and Securing Kubernetes Workloads with Cilium, Hubble, and Tetragon

Conference workshop in Nuremberg on November 19th

eBPF Summit

September 11th! Registration and CfP now open

Cilium + eBPF Day

CfP open until July 14th

🐝 

The Livestreams

eCHO Episode 141: Cilium's Gateway API Implementation

eCHO Episode 142:

Seznam x Cilium Live Case Study