eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

14th January 2025

One of the reasons I love working in open source is the Cambrian explosion of ideas and interests it enables. It’s awesome to see how people take inspiration from projects or proposals and channel it into their own unique passions. Take this week’s highlights for example, eBPF programs can now be written in .NET and ebpf.io was translated in Japanese. Both of these make eBPF more accessible and brings it to whole new populations of people and perspectives.

Open source also encourages collaboration by allowing us to build on each other’s work. The eBPF Verifier Project, for instance, allows developers to learn from the mistakes (and cursing at the verifier) of other programers while a new website cataloging eBPF Research Papers makes it easier to discover and share knowledge within and across the community. Its only the second week of the year and I can't wait to see all the different ways the community will collaborate and push things forward in the year ahead! I have to go finalize the schedule for CiliumCon so let’s 🐝 -gin.

The Technical

kubezonnet: Monitor Cross-Zone Network Traffic in Kubernetes

Getting your cloud bill under control with Cilium and eBPF, its also open source

Tracepoints, Kprobes, or Fprobes: Which One Should You Choose?

Find out what the superior choice really is

Ebpf For Tls Traffic Tracing: Secure & Efficient Observability

Overcome the challenges of proxying, decryption, and logging

eBPF to monitor heap usage of Java app

"allows getting basic observability of JVM-based apps to be provided on Platform level instead of being responsibility of a developer"

kubernetes-sigs/ingress2gateway

Now with support for Cilium, go spin the wheels on Gateway API

KallDrexx/DotnetEbpf

"(wip) Write Linux eBPF applications in .net"

parttimenerd/ebpf-verifier-errors

"A project to collect eBPF verifier errors and how they can be resolved"

antitree/seccomp-diff

"Analyze binaries and containers to extract and disassemble seccomp-bpf profiles"

AdityaSeth777/ShieldK8s

"A privacy-focused, local-only security dashboard for monitoring Kubernetes cluster security using eBPF and Cilium" launch blog here

kunai-project/kunai

"Threat-hunting tool for Linux leveraging eBPF with kernel-level probes that capture critical events"

🐝

The Ecosystem

eBPF in 2025: Bigger Than the CrowdStrike Outage

"Because eBPF allows us to rewrite so many things better, in 2025, we will see a Cambrian explosion of use cases. eBPF is coming for so many different parts of infrastructure technology"

The O11ys 2024 - The Winners!

Cilium wins for Best Kubernetes Tooling: Policy and Configuration

2025 observability predictions and trends from Grafana Labs

"Moving forward we’ll see more opportunities for eBPF to create a seamless bridge between system-level data and application telemetry while standardizing how platforms collect and process observability data"

Tetragon Configuration Gotchas

Quick blog on why Reddit chose Tetragon

The eBPF Verifier Errors Project

"Verifier errors can be cryptic and frustrating, but we can change that"

eBPF Research Papers

"Database" of eBPF related research papers to ease discoverability

The Future of Secure Code Execution: Embracing Collaborative eBPF Approaches

"As the industry evolves, using models like eBPF that encourage collaboration, and standardization can help create stronger and safer systems"

Unlocking cloud native security with Cilium and eBPF

Intro on the CNCF blog

0xCAFE

Keep up with tech news, articles, and GitHub projects in just 15 minutes per day

GenAI to Advanced Microsegmentation: Secure Workload 3.10 Has It All!

"The shift to eBPF not only enhances data collection accuracy but also reduces agent resource consumption by over 10%"

🐝

The How To

Overcoming Kubernetes IP Address Exhaustion with Cilium

Learn the multiple IPAM modes that Cilium supports

🐝

The Video

Robotics Platform empowered by Cloud-Native Technologies | Tomoya Fujita | Cloud Robotics WG

See Cilium on the edge

🐝

The Events

DNS Troubleshooting Made Simple: Real-World Solutions with Isovalent and Cilium

January 14th, online webinar

Hybrid Cloud Security: Cilium-Powered Micro-Segmentation for VMs and Containers

January 21st, online webinar

eBPF Dev Room at FOSDEM

February 1st in Brussels

Cilium and Cisco ACI: Best of Both Worlds

February 25th, online webinar

bpfconf

CfP now open for the invite only event on March 24-26 in Montreal

CiliumCon EU

April 1st in London, this is not a joke!

🐝 

The Livestreams

eCHO Episode 165:

Predictions for 2025

eCHO Episode 166: Multi-Cluster Load Balancing with Cilium, Cluster Mesh and Gateway API