I am finally recovered from the FOSDEM flu, but seeing everyone in the community made a few days in bed worth it. I love FOSDEM because it plugs you directly into buzz around open source. The eBPF Devroom was back again this year with an expanded full day schedule and wide range of topics.
View in browser
echo-newsletter 101

eCHO news is your bi-weekly wrap up of all things eBPF and Cilium. If you want to keep up on the latest in cloud native networking, observability, and security this is your quelle

10th February 2026

 

I am finally recovered from the FOSDEM flu, but seeing everyone in the community made a few days in bed worth it. I love FOSDEM because it plugs you directly into buzz around open source. The eBPF Devroom was back again this year with an expanded full day schedule and wide range of topics.

 

Just looking at the schedule and hearing the talks, a few things stood out to me. First, from reachability analysis to "Lightweight XDP Profiling," the community is obsessing over performance as a priority. Second, the developer experience is improving with more language support, like PythonBPF, an update on Aya, and hookpoint tips. And finally, we are finally figuring out how to let more people use eBPF without needing full root privileges with BPF Tokens.

 

If you missed the sessions, all the recordings are up, including mine where I dove into how the eBPF Foundation is strategically funding the ecosystem to strengthen the entire community at once. I have to finish the Cilium project update video for KubeCon so let’s 🐝 -gin.

The Technical

Navigating the ingress-nginx archival: why now is the time to move to Cilium

Is Cilium ingress or Gateway API the right choice? Find out in the blog

 

Cilium: Eliminating the hidden network overhead in Kubernetes

Explore Cilium from a cloud native and FinOps perspective

 

ProfInfer: An eBPF-based Fine-Grained LLM Inference Profiler

eBPF is becoming the tool of choice for AI now too

 

How Meta turned the Linux Kernel into a planet-scale Load Balancer. Part I

"Katran co-locates computation with the physics of packet movement"

 

Streamline Network Policy Generation in OpenShift with Cilium

Template on project creation

 

How Blue-Green helped us migrating critical components with zero downtime

Or how to go from AWS VPC CNI to Cilium

 

Kubernetes Security in 2026

In 2026, teams must move beyond “alerting” (Falco) to “enforcement” (Tetragon)

 

Runtime Visibility for Legacy Apps - An eBPF Lab and Takeaways

"get real-time visibility into legacy apps without rewriting or adding heavy agents"

 

Deep Dive: Understanding the Aya Project Structure

Choosing program type and file structure

 

Ingress-NGINX is Retiring March 2026: A Migration Guide for Platform Engineers

"Top Implementations: Envoy Gateway, Cilium Gateway API"

 

ivanmtech/turn-bpf

eBPF offloads of RFC 8656 channels

 

tuananh/ci-agent

eBPF-based egress audit tool for CI environments

 

tom-lubenow/nu_plugin_ebpf

A Nushell plugin that compiles Nushell closures to eBPF bytecode

 

danthegoodman1/netfence

Like Envoy xDS, but for eBPF filters

 

ajitm722/Decentralized-Kernel-Metric-Driven-Scheduling-for-Edge-Faas-Workloads

Kernel-metric driven orchestration for decentralized edge computing

 

PawseySC/ebpf-traffic-meter

A per-user network traffic monitoring tool using eBPF

 

fksvs/siper

XDP Based Lightweight and Fast Firewall

 

ellanetworks/core

5G core designed with an eBPF-based data plane

 

pushkar-gr/Aegis

A high-performance, distributed Zero Trust firewall using eBPF/XDP, Go, and Rust

 

p-r-a-v-i-n/rwatch

Real-time Threat Detection using eBPF + Rust

 

overyonder/rstat

eBPF system monitor. Sub-millisecond samples, zero allocations, faster than top

 

codelaboratoryltd/bng

eBPF-accelerated Broadband Network Gateway for K8s edge deployments. Blog

🐝

 

The Ecosystem

Cisco is using eBPF to rethink firewalls, vulnerability mitigation

Or smartly switching to smart switches

 

How Nutanix AHV Uses eBPF for vNIC-IP Mapping

Forwards only interesting packets (DHCP, ARP, etc.) to a userspace for processing

 

Sylva 1.6: It brings smoother ops, stronger security, and more flexible clusters

Cilium is coming for telco workloads

 

What Is eBPF? Use Cases, Benefits, and Key Differences

What, where, when, why, and how

 

The 6 biggest eBPF beneficiaries

by product category

🐝

 

The How To

Kubewekend Session 7: Setup new deployment and route traffic to kubewekend cluster

Installation and ingress set up

 

How to Deploy Cilium CNI for eBPF-Powered Kubernetes Networking

with many data flow diagrams

 

Building an eBPF Transparent Proxy

Working towards a fully working SOCKS5 proxy on Kubernetes

 

Kubernetes Networking Series Part 5: Debugging

or where to use cilium bpf lb list

🐝

 

The Video

All the talks from FOSDEM eBPF Dev Room are up

🐝

 

The Events

Observability Unplugged - The eBPF Shift in Observability

Live podcast with me on Thursday

 

CiliumCon EU

Schedule out now!

🐝 

The Livestreams

eCHO Episode 201: 2026 networking, security, and eBPF predictions

eCHO Episode 201: 2026 networking, security, and eBPF predictions

  

eCHO Episode 202: Exploring New Features in Cilium 1.19

eCHO Episode 202: Exploring New Features in Cilium 1.19

The Post of the Week

I'm excited to share that my PR fixing a complex edge case in Cilium's eBPF datapath has been merged.  While debugging a DSR connectivity issue in our production Kubernetes cluster, I discovered a bug in Cilium's BPF datapath — and after 4 months and nearly 100 conversations, my fix has been merged.

As always, if you’ve seen a blog post, a tool, or anything else eBPF or Cilium related that you think the rest of the community should hear about, send them my way. You can either hit reply or join the #echo-news channel on Cilium Slack. You can also find all of the past episodes on the website.

🐝

To make sure you keep getting these emails, please add bill@isovalent.com to your address book or otherwise mark me as a permitted sender.

 

Know a friend that needs to be in the know? Forward this to them

Was this forwarded to you? Sign up today!

Written and sent by Bill Mulligan. Any feedback is welcome!

LF_KCCNC_headshot_251113_Bill_Mulligan_9686

I work for Isovalent at Cisco which is leading the eBPF-Powered Revolution in Cloud Native Networking, Observability, and Security with Cilium and Tetragon

logo-wordmark-isovalent-vertical-dark@2x
LinkedIn
Bluesky_Logo.svg

Cisco/Isovalent, LLC, 755 Sycamore Drive, Milipitas, CA 95035, United States

Unsubscribe Manage preferences