eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

5th November 2024

One of my favorite lines from the eBPF Documentary is "This means we can rebuild everything better. What should we rebuild first?" Cilium's answers to that question were around networking, observability, and security, but I think we are now starting to really move into "everything better" phase.

You can now write your own custom scheduler and researchers at Carnegie Mellon University implemented at database in eBPF that has 2x throughput and lower latency than Redis. This rebuilding better is only going to be accelerated by the recent IETF RFC for eBPF that seeks to standardized the instruction set architecture making it easier to have compatibility across platforms and vendors. Mark my words, the question for 2025 is going to be "eBPF means we can rebuild everything better. What should we rebuild next?"

I still have 5 talks to prepare for Cilium + eBPF Day and KubeCon next week so let’s 🐝 -gin.

The Technical

A Minimal Scheduler with eBPF, sched_ext and C

Learn to experiment with time slices, used CPUs, and multiple queues

RFC 9669: BPF Instruction Set Architecture (ISA)

Getting standardized under IETF

How to run code in kernel space? eBPF!

Deep dive tutorial covering both kernel and user space coded

BFD: A Networking Beacon for Highly Available Kubernetes Clusters

Taking potential network outages from minutes down to sub-seconds

Debugging Memory Leaks with eBPF

Track down why your legacy application is leaking with uprobes

Unit Testing eBPF Programs

for when you don't want to test in production

Linux XFRM Reference Guide for IPsec

"the XFRM building blocks Cilium uses to provide its IPsec support"

Network Policies: microsegmentação em clusters Kubernetes

em português

Tracing OpenvSwitch with eBPF

Tracing the old with the new

How to use eBPF for monitoring Linux thread contention?

A few simple tools for track thread blocking, lock contention, and run queue latency

Transparent Packet Inspection with Netfilter and eBPF

"allowing eBPF programs to redirect packets to newly introduced Netfilter hooks"

pinoOgni/ebpf-samples

"Repo with various examples to learn, explore, and experiment with eBPF"

🐝

The Ecosystem

P99Conf: How eBPF Could Make Faster Database Systems

"Instead of pulling DBMS data to user-space, push DBMS logic to kernel-space" with eBPF

Unlock Linux superpowers with eBPF, with Bill Mulligan - HS#28

My next podcast appearance "Not all heroes wear capes... some prefer bees"

Exploring eBPF for Windows: Opportunities and Limitations

Opening the windows to let in the bees

Qpoint Launches eBPF-based Monitoring and Control for External APIs and Services

"transparently taps into requests between apps and their third-party dependencies"

🐝

The How To

Spin up a local Kubernetes environment with Kind and Cilium without kube-proxy

and enable Hubble too

شروع برنامه نویسی در ebpf با یک مثال ساده

eBPF programming in Persian

Sveltos: Optimising Day-2 Operations with Cilium and Tetragon

GitOps to deploy Cilium, Tetragon, and "critical tracing results to the management cluster"

Multi-Cluster with Cilium on Civo cloud

Two clusters together from deployment to clean up

🐝

The Video

eBPF: Unlocking the Kernel [OFFICIAL DOCUMENTARY]

Not new, but just crossed 100k views in less than a year! Watch it if you haven't yet

🐝

The Events

Enhancing AKS Networking and Security with Isovalent Platform: Hands-On Workshop for Cloud Architects

Virtual Workshop on November 7

Cilium + eBPF Day

See you next week in Salt Lake! Schedule and launch blog are out now

Leveling up EKS Clusters with Isovalent Platform: Hands-On Workshop for Cloud Architects

Virtual Workshop on November 26/28

eBPF Runtime Security with Tetragon: Insights from v1.14

Release webinar on November 21

Kubernetes Traffic Engineering with Cilium: Scenarios, Diagrams, and Best Practices

Webinar on December 12

eBPF Dev Room at FOSDEM

February 1st in Brussels

🐝 

The Livestreams

eCHO Episode 158: Complete view into system performance with xcapture-ebpf

eCHO Episode 159: KCD UK Wrap Up + KubeCon Schedule Walkthrough