eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

28th January 2025

This Saturday you will find me in Brussels at FOSDEM for the first ever eBPF Dev Room! If you don't know FOSDEM, it is the largest open source conference in the world that itself is run like an open source project with no registration and thousands of people volunteering to make it happen. I love FOSDEM because it showcases how much you can get done with just passionate people wanting to create something cool.

The eBPF Dev Room schedule shows just how far we have come as an ecosystem ranging from the rewriting scheduling to GPU profiling to rolling out netkit to millions of containers at Meta. We'll have stickers and a few books if you mention the newsletter. I'm also happy to meet anyone that wants to chat about eBPF too, just reply to this email or message me on any platform. If you can't find me anywhere else, I'll be giving a talk in the community room on Saturday and following the state of FOSS funding on Sunday. I have to finish writing my talk so let’s 🐝 -gin.

The Technical

Kubernetes Network Policies Done the Right Way – A Comprehensive Guide

eBook on striking the balance between security and innovation

Go, C, Rust, and More: Picking the Right eBPF Application Stack

Deciding which language and library to use

Cilium으로 구현하는 FQDN 기반 Kubernetes 네트워크 정책

Cilium network policies in Korean

eBPF-Based Network Observability: Exploring Cilium Hubble and Alternatives

Learn to set up and monitor Hubble

acassen/fastswan

"Linux Kernel XFRM offload via eBPF/XDP"

patrickpichler/beesting

"Inject and monitor honey tokens into a kubernetes workload" with eBPF

xmigrate/blxrep

"eBPF based sector level disk replication tool for disaster recovery purpose"

🐝

The Ecosystem

Case Study: Polar Signals Uses eBPF to Monitor Internal Cross-Zone Network Traffic on Kubernetes, Reducing These Operating Costs by 50%

"For this use case, eBPF’s low overhead, flexibility, and ease of implementation were key factors"

Networking and eBPF Predictions for 2025 and Beyond

I agree with 8/10, can you guess which ones?

Strobelight: A profiling service built on open source technology

Saving 15k servers with eBPF

eBPF Tool Identifies Cross-Zone Kubernetes Network Traffic

"They turned to eBPF to deliver the answers, and cut their cloud bill in half" Also covered by The Stack

Sched-ext Scheduler Contest FOSDEM’25

Craft the ultimate schedule and win prizes

Streamlining Tetragon Deployment with Amazon EC2 Image Builder

"With pre-installed Tetragon deployed in every instance, businesses gain immediate protection and eliminate gaps in monitoring"

eBPF Basics: A Guide to the Next Evolution in Systems Programming

Intro to eBPF with different program types

🐝

The How To

Egress traffic blocking with Cilium cluster-wide network policies on Azure Kubernetes Service

Learn to prevent to network traffic going to malicious network entities and the latest scalability upgrades for it

Automating high performance Kubernetes deployments on-prem (with Ansible, Cilium BGP and Longhorn on k8s v1.32)

"I chose the above technologies because I think they’re the best tools for the job"

Building a Globally Distributed WebRTC Service with Elixir WebRTC, STUNner, and Cilium Cluster Mesh

Building Broadcaster on multiple Kubernetes clusters for low latency

Kubernetes BGP Connectivity with a UniFi router

BGP + Gateway API for Kubernetes Ingress

🐝

The Video

Imagine Learning's Secret to Seemless User Experiences

It's all about the kernel level data that Cilium can provide

Introduction to eBPF and Cilium | Exploring the Technology & Joining the Community ft. Bill Mulligan

Interview recorded at KubeCon India

Gaming under pressure: enhancing the Linux gaming experience with sched_ext

60 fps gaming while compiling a kernel

🐝

The Events

eBPF Dev Room at FOSDEM

February 1st in Brussels

Cilium and Cisco ACI: Best of Both Worlds

February 25th, online webinar

bpfconf

CfP now open for the invite only event on March 24-26 in Montreal

CiliumCon EU

April 1st in London, this is not a joke! Full Schedule out now

🐝 

The Livestreams

eCHO Episode 167:

Using ekcstl to disable kube-proxy and install cilium natively

eCHO Episode 168:

BPF Tokens